Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2026-25679 (GCVE-0-2026-25679)
Vulnerability from cvelistv5 – Published: 2026-03-06 21:28 – Updated: 2026-07-02 12:04- CWE-1286 - Improper Validation of Syntactic Correctness of Input
| Vendor | Product | Version | |
|---|---|---|---|
| Go standard library | net/url |
Affected:
0 , < 1.25.8
(semver)
Affected: 1.26.0-0 , < 1.26.1 (semver) |
|
| Red Hat | Red Hat Ansible Automation Platform 2.6 for RHEL 10 |
cpe:/a:redhat:ansible_automation_platform:2.6::el10 cpe:/a:redhat:ansible_automation_platform_developer:2.6::el10 |
|
| Red Hat | Red Hat Enterprise Linux Server (v. 7 ELS) |
cpe:/o:redhat:rhel_els:7 |
|
| Red Hat | Red Hat Ansible Automation Platform 2.5 for RHEL 8 |
cpe:/a:redhat:ansible_automation_platform:2.5::el8 cpe:/a:redhat:ansible_automation_platform_developer:2.5::el8 cpe:/a:redhat:ansible_automation_platform_inside:2.5::el8 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.12 |
cpe:/a:redhat:openshift:4.12::el8 cpe:/a:redhat:openshift:4.12::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.13 |
cpe:/a:redhat:openshift:4.13::el8 cpe:/a:redhat:openshift:4.13::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.14 |
cpe:/a:redhat:openshift:4.14::el8 cpe:/a:redhat:openshift:4.14::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.16 |
cpe:/a:redhat:openshift:4.16::el8 cpe:/a:redhat:openshift:4.16::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.18 |
cpe:/a:redhat:openshift:4.18::el8 cpe:/a:redhat:openshift:4.18::el9 |
|
| Red Hat | Red Hat Satellite 6.16 for RHEL 8 |
cpe:/a:redhat:satellite:6.16::el8 cpe:/a:redhat:satellite_capsule:6.16::el8 cpe:/a:redhat:satellite_maintenance:6.16::el8 cpe:/a:redhat:satellite_utils:6.16::el8 |
|
| Red Hat | Red Hat Ansible Automation Platform 2.5 for RHEL 9 |
cpe:/a:redhat:ansible_automation_platform:2.5::el9 cpe:/a:redhat:ansible_automation_platform_developer:2.5::el9 cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9 |
|
| Red Hat | Red Hat Ansible Automation Platform 2.6 for RHEL 9 |
cpe:/a:redhat:ansible_automation_platform:2.6::el9 cpe:/a:redhat:ansible_automation_platform_developer:2.6::el9 cpe:/a:redhat:ansible_automation_platform_inside:2.6::el9 |
|
| Red Hat | Cryostat 4 on RHEL 9 |
cpe:/a:redhat:cryostat:4::el9 |
|
| Red Hat | Red Hat OpenStack Platform 17.1 |
cpe:/a:redhat:openstack:17.1 cpe:/a:redhat:openstack:17.1::el9 |
|
| Red Hat | Red Hat Satellite 6.16 for RHEL 9 |
cpe:/a:redhat:satellite:6.16::el9 cpe:/a:redhat:satellite_capsule:6.16::el9 cpe:/a:redhat:satellite_maintenance:6.16::el9 cpe:/a:redhat:satellite_utils:6.16::el9 |
|
| Red Hat | Red Hat Satellite 6.19 for RHEL 9 |
cpe:/a:redhat:satellite:6.19::el9 cpe:/a:redhat:satellite_capsule:6.19::el9 cpe:/a:redhat:satellite_maintenance:6.19::el9 cpe:/a:redhat:satellite_utils:6.19::el9 |
|
| Red Hat | Red Hat Enterprise Linux AppStream EUS (v. 10.0) |
cpe:/o:redhat:enterprise_linux_eus:10.0 |
|
| Red Hat | Red Hat Enterprise Linux AppStream (v. 10) |
cpe:/o:redhat:enterprise_linux:10.1 cpe:/o:redhat:enterprise_linux:10.2 |
|
| Red Hat | Red Hat Enterprise Linux AppStream (v. 8) |
cpe:/a:redhat:enterprise_linux:8::appstream |
|
| Red Hat | Red Hat Enterprise Linux AppStream AUS (v. 8.2) |
cpe:/a:redhat:rhel_aus:8.2::appstream |
|
| Red Hat | Red Hat Enterprise Linux AppStream AUS (v.8.4) |
cpe:/a:redhat:rhel_aus:8.4::appstream |
|
| Red Hat | Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) |
cpe:/a:redhat:rhel_eus_long_life:8.4::appstream |
|
| Red Hat | Red Hat Enterprise Linux AppStream AUS (v.8.6) |
cpe:/a:redhat:rhel_aus:8.6::appstream |
|
| Red Hat | Red Hat Enterprise Linux AppStream E4S (v.8.6) |
cpe:/a:redhat:rhel_e4s:8.6::appstream |
|
| Red Hat | Red Hat Enterprise Linux AppStream TUS (v.8.6) |
cpe:/a:redhat:rhel_tus:8.6::appstream |
|
| Red Hat | Red Hat Enterprise Linux AppStream E4S (v.8.8) |
cpe:/a:redhat:rhel_e4s:8.8::appstream |
|
| Red Hat | Red Hat Enterprise Linux AppStream TUS (v.8.8) |
cpe:/a:redhat:rhel_tus:8.8::appstream |
|
| Red Hat | Red Hat Enterprise Linux AppStream E4S (v.9.0) |
cpe:/a:redhat:rhel_e4s:9.0::appstream |
|
| Red Hat | Red Hat Enterprise Linux AppStream E4S (v.9.2) |
cpe:/a:redhat:rhel_e4s:9.2::appstream |
|
| Red Hat | Red Hat Enterprise Linux AppStream E4S (v.9.4) |
cpe:/a:redhat:rhel_e4s:9.4::appstream |
|
| Red Hat | Red Hat Enterprise Linux AppStream EUS (v.9.4) |
cpe:/a:redhat:rhel_eus:9.4::appstream |
|
| Red Hat | Red Hat Enterprise Linux AppStream EUS (v.9.6) |
cpe:/a:redhat:rhel_eus:9.6::appstream |
|
| Red Hat | Red Hat Enterprise Linux AppStream (v. 9) |
cpe:/a:redhat:enterprise_linux:9::appstream |
|
| Red Hat | Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) |
cpe:/o:redhat:enterprise_linux_eus:10.0 |
|
| Red Hat | Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) |
cpe:/o:redhat:enterprise_linux:10.1 cpe:/o:redhat:enterprise_linux:10.2 |
|
| Red Hat | Red Hat CodeReady Linux Builder EUS (v.9.4) |
cpe:/a:redhat:rhel_eus:9.4::crb |
|
| Red Hat | Red Hat CodeReady Linux Builder EUS (v.9.6) |
cpe:/a:redhat:rhel_eus:9.6::crb |
|
| Red Hat | Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) |
cpe:/a:redhat:enterprise_linux:9::crb |
|
| Red Hat | Custom Metric Autoscaler 2.19 |
cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9 |
|
| Red Hat | DevWorkspace Operator 0.4 |
cpe:/a:redhat:devworkspace:0.40::el9 |
|
| Red Hat | Logging Subsystem for Red Hat OpenShift 6.0 |
cpe:/a:redhat:logging:6.0::el9 |
|
| Red Hat | Logging Subsystem for Red Hat OpenShift 6.2 |
cpe:/a:redhat:logging:6.2::el9 |
|
| Red Hat | Logging Subsystem for Red Hat OpenShift 6.4 |
cpe:/a:redhat:logging:6.4::el9 |
|
| Red Hat | Multicluster Global Hub 1.3.4 |
cpe:/a:redhat:multicluster_globalhub:1.3::el9 |
|
| Red Hat | Multicluster Global Hub 1.4.5 |
cpe:/a:redhat:multicluster_globalhub:1.4::el9 |
|
| Red Hat | Multicluster Global Hub 1.5.4 |
cpe:/a:redhat:multicluster_globalhub:1.5::el9 |
|
| Red Hat | Multicluster Global Hub 1.6.2 |
cpe:/a:redhat:multicluster_globalhub:1.6::el9 |
|
| Red Hat | Network Observability (NETOBSERV) 1.11.2 |
cpe:/a:redhat:network_observ_optr:1.11::el9 |
|
| Red Hat | OpenShift API for Data Protection 1.4 |
cpe:/a:redhat:openshift_api_data_protection:1.4::el9 |
|
| Red Hat | OpenShift API for Data Protection 1.5 |
cpe:/a:redhat:openshift_api_data_protection:1.5::el9 |
|
| Red Hat | OpenShift Compliance Operator 1 |
cpe:/a:redhat:openshift_compliance_operator:1::el9 |
|
| Red Hat | OpenShift File Integrity Operator - FIO 1 |
cpe:/a:redhat:openshift_file_integrity_operator:1::el9 |
|
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.14 |
cpe:/a:redhat:acm:2.14::el9 |
|
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.15 |
cpe:/a:redhat:acm:2.15::el9 |
|
| Red Hat | Red Hat Advanced Cluster Security for Kubernetes 4.10 |
cpe:/a:redhat:advanced_cluster_security:4.10::el8 |
|
| Red Hat | Red Hat Advanced Cluster Security for Kubernetes 4.8 |
cpe:/a:redhat:advanced_cluster_security:4.8::el8 |
|
| Red Hat | Red Hat Advanced Cluster Security for Kubernetes 4.9 |
cpe:/a:redhat:advanced_cluster_security:4.9::el8 |
|
| Red Hat | Red Hat Ansible Automation Platform 2.6 |
cpe:/a:redhat:ansible_automation_platform:2.6::el9 |
|
| Red Hat | Red Hat Developer Hub 1.8 |
cpe:/a:redhat:rhdh:1.8::el9 |
|
| Red Hat | Red Hat Developer Hub 1.9 |
cpe:/a:redhat:rhdh:1.9::el9 |
|
| Red Hat | Red Hat Enterprise Linux AI 3.3 |
cpe:/a:redhat:enterprise_linux_ai:3.3::el9 |
|
| Red Hat | Red Hat Hardened Images |
cpe:/a:redhat:hummingbird:1 |
|
| Red Hat | Red Hat Lightspeed (formerly Insights) for Runtimes 1 |
cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9 |
|
| Red Hat | Red Hat OpenShift AI 2.25 |
cpe:/a:redhat:openshift_ai:2.25::el9 |
|
| Red Hat | Red Hat OpenShift Builds 1.6.5 |
cpe:/a:redhat:openshift_builds:1.6::el9 |
|
| Red Hat | Red Hat OpenShift Builds 1.7.3 |
cpe:/a:redhat:openshift_builds:1.7::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.15 |
cpe:/a:redhat:openshift:4.15::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.17 |
cpe:/a:redhat:openshift:4.17::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.19 |
cpe:/a:redhat:openshift:4.19::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.20 |
cpe:/a:redhat:openshift:4.20::el9 |
|
| Red Hat | Red Hat OpenShift Dev Spaces 3.27 |
cpe:/a:redhat:openshift_devspaces:3.27::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 2.6 |
cpe:/a:redhat:service_mesh:2.6::el8 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.0 |
cpe:/a:redhat:service_mesh:3.0::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.1 |
cpe:/a:redhat:service_mesh:3.1::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.2 |
cpe:/a:redhat:service_mesh:3.2::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.3 |
cpe:/a:redhat:service_mesh:3.3::el9 |
|
| Red Hat | Red Hat OpenShift distributed tracing 3.9.3 |
cpe:/a:redhat:openshift_distributed_tracing:3.9::el9 |
|
| Red Hat | Red Hat OpenStack 1.5 |
cpe:/a:redhat:stf:1.5::el9 |
|
| Red Hat | Red Hat OpenStack Services on OpenShift 18 |
cpe:/a:redhat:openstack:18.0::el9 |
|
| Red Hat | Red Hat Quay 3.10 |
cpe:/a:redhat:quay:3.10::el8 |
|
| Red Hat | Red Hat Quay 3.12 |
cpe:/a:redhat:quay:3.12::el8 |
|
| Red Hat | Red Hat Quay 3.14 |
cpe:/a:redhat:quay:3.14::el8 |
|
| Red Hat | Red Hat Quay 3.15 |
cpe:/a:redhat:quay:3.15::el8 |
|
| Red Hat | Red Hat Quay 3.16 |
cpe:/a:redhat:quay:3.16::el9 |
|
| Red Hat | Red Hat Quay 3.9 |
cpe:/a:redhat:quay:3.9::el8 |
|
| Red Hat | Red Hat Satellite 6.18 |
cpe:/a:redhat:satellite:6.18::el9 |
|
| Red Hat | Red Hat Trusted Artifact Signer 1.3 |
cpe:/a:redhat:trusted_artifact_signer:1.3::el9 |
|
| Red Hat | Red Hat Update Infrastructure 5 |
cpe:/a:redhat:rhui:5::el9 |
|
| Red Hat | Red Hat Web Terminal 1.11 |
cpe:/a:redhat:webterminal:1.11::el9 |
|
| Red Hat | Red Hat Web Terminal 1.12 |
cpe:/a:redhat:webterminal:1.12::el9 |
|
| Red Hat | Red Hat Web Terminal 1.13 |
cpe:/a:redhat:webterminal:1.13::el9 |
|
| Red Hat | Red Hat Web Terminal 1.14 |
cpe:/a:redhat:webterminal:1.14::el9 |
|
| Red Hat | Red Hat Web Terminal 1.15 |
cpe:/a:redhat:webterminal:1.15::el9 |
|
| Red Hat | mirror registry for Red Hat OpenShift 2.0 |
cpe:/a:redhat:mirror_registry:2.0::el8 |
|
| Red Hat | Assisted Installer for Red Hat OpenShift Container Platform 2 |
cpe:/a:redhat:assisted_installer:2 |
|
| Red Hat | cert-manager Operator for Red Hat OpenShift |
cpe:/a:redhat:cert_manager:1 |
|
| Red Hat | Confidential Compute Attestation |
cpe:/a:redhat:confidential_compute_attestation:1 |
|
| Red Hat | Deployment Validation Operator |
cpe:/a:redhat:deployment_validator_operator |
|
| Red Hat | External Secrets Operator for Red Hat OpenShift |
cpe:/a:redhat:external_secrets_operator:1 |
|
| Red Hat | ExternalDNS Operator |
cpe:/a:redhat:ext_dns_optr:1 |
|
| Red Hat | Fence Agents Remediation Operator |
cpe:/a:redhat:workload_availability_far:0 |
|
| Red Hat | Gatekeeper 3 |
cpe:/a:redhat:gatekeeper:3 |
|
| Red Hat | Logging Subsystem for Red Hat OpenShift |
cpe:/a:redhat:logging:5 |
|
| Red Hat | Logical Volume Manager Storage |
cpe:/a:redhat:lvms:4 |
|
| Red Hat | Machine Deletion Remediation Operator |
cpe:/a:redhat:workload_availability_mdr:0 |
|
| Red Hat | Migration Toolkit for Containers |
cpe:/a:redhat:rhmt:1 |
|
| Red Hat | mirror registry for Red Hat OpenShift |
cpe:/a:redhat:mirror_registry:1 |
|
| Red Hat | Multicluster Engine for Kubernetes |
cpe:/a:redhat:multicluster_engine |
|
| Red Hat | OpenShift Developer Tools and Services |
cpe:/a:redhat:ocp_tools |
|
| Red Hat | OpenShift Lightspeed |
cpe:/a:redhat:openshift_lightspeed |
|
| Red Hat | OpenShift Pipelines |
cpe:/a:redhat:openshift_pipelines:1 |
|
| Red Hat | OpenShift Serverless |
cpe:/a:redhat:serverless:1 |
|
| Red Hat | OpenShift Service Mesh 2 |
cpe:/a:redhat:service_mesh:2 |
|
| Red Hat | Red Hat 3scale API Management Platform 2 |
cpe:/a:redhat:red_hat_3scale_amp:2 |
|
| Red Hat | Red Hat Certification Program for Red Hat Enterprise Linux 9 |
cpe:/a:redhat:certifications:9 |
|
| Red Hat | Red Hat Connectivity Link 1 |
cpe:/a:redhat:connectivity_link:1 |
|
| Red Hat | Red Hat Edge Manager 1 |
cpe:/a:redhat:edge_manager:1 |
|
| Red Hat | Red Hat Enterprise Linux 10 |
cpe:/o:redhat:enterprise_linux:10 |
|
| Red Hat | Red Hat Enterprise Linux 7 |
cpe:/o:redhat:enterprise_linux:7 |
|
| Red Hat | Red Hat Enterprise Linux 8 |
cpe:/o:redhat:enterprise_linux:8 |
|
| Red Hat | Red Hat Enterprise Linux 9 |
cpe:/o:redhat:enterprise_linux:9 |
|
| Red Hat | Red Hat OpenShift Cluster Manager CLI |
cpe:/a:redhat:openshift_cluster_manager_cli:1 |
|
| Red Hat | Red Hat OpenShift Container Platform 4 |
cpe:/a:redhat:openshift:4 |
|
| Red Hat | Red Hat Openshift Data Foundation 4 |
cpe:/a:redhat:openshift_data_foundation:4 |
|
| Red Hat | Red Hat OpenShift GitOps |
cpe:/a:redhat:openshift_gitops:1 |
|
| Red Hat | Red Hat OpenShift on AWS |
cpe:/a:redhat:openshift_service_on_aws:1 |
|
| Red Hat | Red Hat OpenShift Virtualization 4 |
cpe:/a:redhat:container_native_virtualization:4 |
|
| Red Hat | Red Hat OpenStack Platform 16.2 |
cpe:/a:redhat:openstack:16.2 |
|
| Red Hat | Red Hat OpenStack Platform 18.0 |
cpe:/a:redhat:openstack:18.0 |
|
| Red Hat | Red Hat Quay 3 |
cpe:/a:redhat:quay:3 |
|
| Red Hat | Red Hat Satellite 6 |
cpe:/a:redhat:satellite:6 |
|
| Red Hat | Red Hat Service Interconnect 1 |
cpe:/a:redhat:service_interconnect:1 |
|
| Red Hat | Red Hat Service Interconnect 2 |
cpe:/a:redhat:service_interconnect:2 |
|
| Red Hat | Security Profiles Operator |
cpe:/a:redhat:openshift_security_profiles_operator:1 |
|
| Red Hat | streams for Apache Kafka 3 |
cpe:/a:redhat:amq_streams:3 |
|
| Red Hat | Zero Trust Workload Identity Manager |
cpe:/a:redhat:zero_trust_workload_identity_manager:1 |
|
| Red Hat | Zero Trust Workload Identity Manager - Tech Preview |
cpe:/a:redhat:zero_trust_workload_identity_manager:0 |
|
| Red Hat | Migration Toolkit for Applications 8 |
cpe:/a:redhat:migration_toolkit_applications:8 |
|
| Red Hat | Node HealthCheck Operator |
cpe:/a:redhat:workload_availability_nhc:0 |
|
| Red Hat | Power monitoring for Red Hat OpenShift |
cpe:/a:redhat:openshift_power_monitoring |
|
| Red Hat | Red Hat AMQ Clients |
cpe:/a:redhat:amq_clients:2023 |
|
| Red Hat | Red Hat Ansible Automation Platform 2 |
cpe:/a:redhat:ansible_automation_platform:2 |
|
| Red Hat | Red Hat build of Apache Camel - HawtIO 4 |
cpe:/a:redhat:apache_camel_hawtio:4 |
|
| Red Hat | Red Hat OpenShift AI (RHOAI) |
cpe:/a:redhat:openshift_ai |
|
| Red Hat | Red Hat OpenShift for Windows Containers |
cpe:/a:redhat:windows_machine_config |
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-25679",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-03-10T13:36:26.554241Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-03-10T13:37:02.459Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"affected": [
{
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.6::el10",
"cpe:/a:redhat:ansible_automation_platform_developer:2.6::el10"
],
"defaultStatus": "affected",
"product": "Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:rhel_els:7"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux Server (v. 7 ELS)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.5::el8",
"cpe:/a:redhat:ansible_automation_platform_developer:2.5::el8",
"cpe:/a:redhat:ansible_automation_platform_inside:2.5::el8"
],
"defaultStatus": "affected",
"product": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.12::el8",
"cpe:/a:redhat:openshift:4.12::el9"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift Container Platform 4.12",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.13::el8",
"cpe:/a:redhat:openshift:4.13::el9"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift Container Platform 4.13",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.14::el8",
"cpe:/a:redhat:openshift:4.14::el9"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift Container Platform 4.14",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.16::el8",
"cpe:/a:redhat:openshift:4.16::el9"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift Container Platform 4.16",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el8",
"cpe:/a:redhat:openshift:4.18::el9"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift Container Platform 4.18",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:satellite:6.16::el8",
"cpe:/a:redhat:satellite_capsule:6.16::el8",
"cpe:/a:redhat:satellite_maintenance:6.16::el8",
"cpe:/a:redhat:satellite_utils:6.16::el8"
],
"defaultStatus": "affected",
"product": "Red Hat Satellite 6.16 for RHEL 8",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.5::el9",
"cpe:/a:redhat:ansible_automation_platform_developer:2.5::el9",
"cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9"
],
"defaultStatus": "affected",
"product": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.6::el9",
"cpe:/a:redhat:ansible_automation_platform_developer:2.6::el9",
"cpe:/a:redhat:ansible_automation_platform_inside:2.6::el9"
],
"defaultStatus": "affected",
"product": "Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:cryostat:4::el9"
],
"defaultStatus": "affected",
"product": "Cryostat 4 on RHEL 9",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openstack:17.1",
"cpe:/a:redhat:openstack:17.1::el9"
],
"defaultStatus": "affected",
"product": "Red Hat OpenStack Platform 17.1",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:satellite:6.16::el9",
"cpe:/a:redhat:satellite_capsule:6.16::el9",
"cpe:/a:redhat:satellite_maintenance:6.16::el9",
"cpe:/a:redhat:satellite_utils:6.16::el9"
],
"defaultStatus": "affected",
"product": "Red Hat Satellite 6.16 for RHEL 9",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:satellite:6.19::el9",
"cpe:/a:redhat:satellite_capsule:6.19::el9",
"cpe:/a:redhat:satellite_maintenance:6.19::el9",
"cpe:/a:redhat:satellite_utils:6.19::el9"
],
"defaultStatus": "affected",
"product": "Red Hat Satellite 6.19 for RHEL 9",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.1",
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream (v. 10)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:enterprise_linux:8::appstream"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream (v. 8)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_aus:8.2::appstream"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_aus:8.4::appstream"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream AUS (v.8.4)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_eus_long_life:8.4::appstream"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_aus:8.6::appstream"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_e4s:8.6::appstream"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream E4S (v.8.6)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_tus:8.6::appstream"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream TUS (v.8.6)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_e4s:8.8::appstream"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream E4S (v.8.8)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_tus:8.8::appstream"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream TUS (v.8.8)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.0::appstream"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.2::appstream"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.4::appstream"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_eus:9.4::appstream"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream EUS (v.9.4)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6::appstream"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:enterprise_linux:9::appstream"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream (v. 9)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.1",
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_eus:9.4::crb"
],
"defaultStatus": "affected",
"product": "Red Hat CodeReady Linux Builder EUS (v.9.4)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6::crb"
],
"defaultStatus": "affected",
"product": "Red Hat CodeReady Linux Builder EUS (v.9.6)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:enterprise_linux:9::crb"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9"
],
"defaultStatus": "affected",
"product": "Custom Metric Autoscaler 2.19",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:devworkspace:0.40::el9"
],
"defaultStatus": "affected",
"product": "DevWorkspace Operator 0.4",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:logging:6.0::el9"
],
"defaultStatus": "affected",
"product": "Logging Subsystem for Red Hat OpenShift 6.0",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:logging:6.2::el9"
],
"defaultStatus": "affected",
"product": "Logging Subsystem for Red Hat OpenShift 6.2",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:logging:6.4::el9"
],
"defaultStatus": "affected",
"product": "Logging Subsystem for Red Hat OpenShift 6.4",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:multicluster_globalhub:1.3::el9"
],
"defaultStatus": "affected",
"product": "Multicluster Global Hub 1.3.4",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:multicluster_globalhub:1.4::el9"
],
"defaultStatus": "affected",
"product": "Multicluster Global Hub 1.4.5",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:multicluster_globalhub:1.5::el9"
],
"defaultStatus": "affected",
"product": "Multicluster Global Hub 1.5.4",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:multicluster_globalhub:1.6::el9"
],
"defaultStatus": "affected",
"product": "Multicluster Global Hub 1.6.2",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:network_observ_optr:1.11::el9"
],
"defaultStatus": "affected",
"product": "Network Observability (NETOBSERV) 1.11.2",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift_api_data_protection:1.4::el9"
],
"defaultStatus": "affected",
"product": "OpenShift API for Data Protection 1.4",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift_api_data_protection:1.5::el9"
],
"defaultStatus": "affected",
"product": "OpenShift API for Data Protection 1.5",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift_compliance_operator:1::el9"
],
"defaultStatus": "affected",
"product": "OpenShift Compliance Operator 1",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift_file_integrity_operator:1::el9"
],
"defaultStatus": "affected",
"product": "OpenShift File Integrity Operator - FIO 1",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:acm:2.14::el9"
],
"defaultStatus": "affected",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:acm:2.15::el9"
],
"defaultStatus": "affected",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.15",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.10::el8"
],
"defaultStatus": "affected",
"product": "Red Hat Advanced Cluster Security for Kubernetes 4.10",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.8::el8"
],
"defaultStatus": "affected",
"product": "Red Hat Advanced Cluster Security for Kubernetes 4.8",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.9::el8"
],
"defaultStatus": "affected",
"product": "Red Hat Advanced Cluster Security for Kubernetes 4.9",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.6::el9"
],
"defaultStatus": "affected",
"product": "Red Hat Ansible Automation Platform 2.6",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhdh:1.8::el9"
],
"defaultStatus": "affected",
"product": "Red Hat Developer Hub 1.8",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhdh:1.9::el9"
],
"defaultStatus": "affected",
"product": "Red Hat Developer Hub 1.9",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3.3::el9"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AI 3.3",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:hummingbird:1"
],
"defaultStatus": "affected",
"product": "Red Hat Hardened Images",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9"
],
"defaultStatus": "affected",
"product": "Red Hat Lightspeed (formerly Insights) for Runtimes 1",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift_ai:2.25::el9"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift AI 2.25",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift_builds:1.6::el9"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift Builds 1.6.5",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift_builds:1.7::el9"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift Builds 1.7.3",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.15::el9"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift Container Platform 4.15",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.17::el9"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift Container Platform 4.17",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.19::el9"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift Container Platform 4.19",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.20::el9"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift Container Platform 4.20",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift_devspaces:3.27::el9"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift Dev Spaces 3.27",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:service_mesh:2.6::el8"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift Service Mesh 2.6",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:service_mesh:3.0::el9"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift Service Mesh 3.0",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:service_mesh:3.1::el9"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift Service Mesh 3.1",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:service_mesh:3.2::el9"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift Service Mesh 3.2",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:service_mesh:3.3::el9"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift Service Mesh 3.3",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3.9::el9"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift distributed tracing 3.9.3",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:stf:1.5::el9"
],
"defaultStatus": "affected",
"product": "Red Hat OpenStack 1.5",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openstack:18.0::el9"
],
"defaultStatus": "affected",
"product": "Red Hat OpenStack Services on OpenShift 18",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:quay:3.10::el8"
],
"defaultStatus": "affected",
"product": "Red Hat Quay 3.10",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:quay:3.12::el8"
],
"defaultStatus": "affected",
"product": "Red Hat Quay 3.12",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:quay:3.14::el8"
],
"defaultStatus": "affected",
"product": "Red Hat Quay 3.14",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:quay:3.15::el8"
],
"defaultStatus": "affected",
"product": "Red Hat Quay 3.15",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:quay:3.16::el9"
],
"defaultStatus": "affected",
"product": "Red Hat Quay 3.16",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:quay:3.9::el8"
],
"defaultStatus": "affected",
"product": "Red Hat Quay 3.9",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:satellite:6.18::el9"
],
"defaultStatus": "affected",
"product": "Red Hat Satellite 6.18",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
],
"defaultStatus": "affected",
"product": "Red Hat Trusted Artifact Signer 1.3",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhui:5::el9"
],
"defaultStatus": "affected",
"product": "Red Hat Update Infrastructure 5",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:webterminal:1.11::el9"
],
"defaultStatus": "affected",
"product": "Red Hat Web Terminal 1.11",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:webterminal:1.12::el9"
],
"defaultStatus": "affected",
"product": "Red Hat Web Terminal 1.12",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:webterminal:1.13::el9"
],
"defaultStatus": "affected",
"product": "Red Hat Web Terminal 1.13",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:webterminal:1.14::el9"
],
"defaultStatus": "affected",
"product": "Red Hat Web Terminal 1.14",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:webterminal:1.15::el9"
],
"defaultStatus": "affected",
"product": "Red Hat Web Terminal 1.15",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:mirror_registry:2.0::el8"
],
"defaultStatus": "affected",
"product": "mirror registry for Red Hat OpenShift 2.0",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:assisted_installer:2"
],
"defaultStatus": "affected",
"product": "Assisted Installer for Red Hat OpenShift Container Platform 2",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:cert_manager:1"
],
"defaultStatus": "affected",
"product": "cert-manager Operator for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:confidential_compute_attestation:1"
],
"defaultStatus": "affected",
"product": "Confidential Compute Attestation",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:deployment_validator_operator"
],
"defaultStatus": "affected",
"product": "Deployment Validation Operator",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:external_secrets_operator:1"
],
"defaultStatus": "affected",
"product": "External Secrets Operator for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:ext_dns_optr:1"
],
"defaultStatus": "affected",
"product": "ExternalDNS Operator",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:workload_availability_far:0"
],
"defaultStatus": "affected",
"product": "Fence Agents Remediation Operator",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:gatekeeper:3"
],
"defaultStatus": "affected",
"product": "Gatekeeper 3",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:logging:5"
],
"defaultStatus": "affected",
"product": "Logging Subsystem for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:lvms:4"
],
"defaultStatus": "affected",
"product": "Logical Volume Manager Storage",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:workload_availability_mdr:0"
],
"defaultStatus": "affected",
"product": "Machine Deletion Remediation Operator",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhmt:1"
],
"defaultStatus": "affected",
"product": "Migration Toolkit for Containers",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:mirror_registry:1"
],
"defaultStatus": "affected",
"product": "mirror registry for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "affected",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:ocp_tools"
],
"defaultStatus": "affected",
"product": "OpenShift Developer Tools and Services",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift_lightspeed"
],
"defaultStatus": "affected",
"product": "OpenShift Lightspeed",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
],
"defaultStatus": "affected",
"product": "OpenShift Pipelines",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "affected",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:service_mesh:2"
],
"defaultStatus": "affected",
"product": "OpenShift Service Mesh 2",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:red_hat_3scale_amp:2"
],
"defaultStatus": "affected",
"product": "Red Hat 3scale API Management Platform 2",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:certifications:9"
],
"defaultStatus": "affected",
"product": "Red Hat Certification Program for Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:connectivity_link:1"
],
"defaultStatus": "affected",
"product": "Red Hat Connectivity Link 1",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:edge_manager:1"
],
"defaultStatus": "affected",
"product": "Red Hat Edge Manager 1",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:7"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux 7",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift_cluster_manager_cli:1"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift Cluster Manager CLI",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4"
],
"defaultStatus": "affected",
"product": "Red Hat Openshift Data Foundation 4",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift_gitops:1"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift GitOps",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift_service_on_aws:1"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift on AWS",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openstack:16.2"
],
"defaultStatus": "affected",
"product": "Red Hat OpenStack Platform 16.2",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openstack:18.0"
],
"defaultStatus": "affected",
"product": "Red Hat OpenStack Platform 18.0",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:quay:3"
],
"defaultStatus": "affected",
"product": "Red Hat Quay 3",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:satellite:6"
],
"defaultStatus": "affected",
"product": "Red Hat Satellite 6",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:service_interconnect:1"
],
"defaultStatus": "affected",
"product": "Red Hat Service Interconnect 1",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:service_interconnect:2"
],
"defaultStatus": "affected",
"product": "Red Hat Service Interconnect 2",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift_security_profiles_operator:1"
],
"defaultStatus": "affected",
"product": "Security Profiles Operator",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:amq_streams:3"
],
"defaultStatus": "affected",
"product": "streams for Apache Kafka 3",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:zero_trust_workload_identity_manager:1"
],
"defaultStatus": "affected",
"product": "Zero Trust Workload Identity Manager",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:zero_trust_workload_identity_manager:0"
],
"defaultStatus": "affected",
"product": "Zero Trust Workload Identity Manager - Tech Preview",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:migration_toolkit_applications:8"
],
"defaultStatus": "unaffected",
"product": "Migration Toolkit for Applications 8",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:workload_availability_nhc:0"
],
"defaultStatus": "unaffected",
"product": "Node HealthCheck Operator",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift_power_monitoring"
],
"defaultStatus": "unaffected",
"product": "Power monitoring for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:amq_clients:2023"
],
"defaultStatus": "unaffected",
"product": "Red Hat AMQ Clients",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:apache_camel_hawtio:4"
],
"defaultStatus": "unaffected",
"product": "Red Hat build of Apache Camel - HawtIO 4",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:windows_machine_config"
],
"defaultStatus": "unaffected",
"product": "Red Hat OpenShift for Windows Containers",
"vendor": "Red Hat"
}
],
"datePublic": "2026-03-06T21:28:14.211Z",
"descriptions": [
{
"lang": "en",
"value": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid."
}
],
"metrics": [
{
"other": {
"content": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"value": "Important"
},
"type": "Red Hat severity rating"
}
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-1286",
"description": "Improper Validation of Syntactic Correctness of Input",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-02T12:04:52.558Z",
"orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"shortName": "redhat-SADP"
},
"references": [
{
"tags": [
"vdb-entry",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"name": "RHBZ#2445356",
"tags": [
"issue-tracking",
"x_refsource_REDHAT"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"tags": [
"x_sadp-csaf-vex"
],
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25679.json"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:13508"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8855"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:13512"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:26527"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:26541"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:28886"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:25043"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:21655"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:25180"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:27076"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:6341"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:28047"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:34365"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:14868"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8314"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:9435"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8856"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:5943"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:10133"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8849"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8931"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:17084"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19719"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19750"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:17040"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:7328"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:10929"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:16696"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:11375"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:10701"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8842"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:7005"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8840"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:5941"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:7992"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:6344"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:6388"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:13642"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:13643"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:7669"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:10169"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:11413"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:11412"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19032"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:29195"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19133"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19022"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19027"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19026"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22937"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19049"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19135"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22450"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19017"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:24386"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19055"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19132"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19031"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:29035"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19126"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19128"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33722"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:6949"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:16875"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:7011"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:7009"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8456"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:7674"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:7878"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8853"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:7879"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20581"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:9043"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:9094"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8434"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19634"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:7876"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20582"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8860"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:9093"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8851"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:7877"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20584"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8877"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8878"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:9695"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:16102"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:9436"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:7883"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8881"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8949"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8852"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:25252"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:25251"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:9434"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:7833"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8879"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:9090"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:25248"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8322"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:25253"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:25250"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22733"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:12030"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:12032"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:10712"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:7834"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8930"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8882"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:12033"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19721"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:12028"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8324"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:12031"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:12029"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:11749"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:9109"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:9439"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8848"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:5944"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8847"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8845"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:9108"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19720"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19475"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:17287"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:7665"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:9097"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:9098"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:7259"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8841"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:5942"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:6382"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:6383"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:13671"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:9044"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:7315"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:29455"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:29703"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19350"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19181"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19185"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19184"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:23228"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19353"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22714"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:26445"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19207"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:29702"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:26636"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:9872"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:26585"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:11800"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22862"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22423"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22347"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:5110"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:21769"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:23345"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:16874"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:29854"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:26568"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8433"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22627"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:25127"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8151"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:13829"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20889"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:11217"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:13791"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:13545"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:9742"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:6802"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:10140"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:10141"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:7385"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:9052"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:10184"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:5549"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:10158"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:12282"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:21696"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:14100"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:21691"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:15091"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:28893"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:14774"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20088"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:17598"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:21657"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20041"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:6564"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:10175"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:11688"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8483"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:11686"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:9440"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8484"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:9448"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8490"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:9453"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8491"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:9461"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8493"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:9385"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:14020"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:11747"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:11916"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:6720"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:11856"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:21017"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:24853"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19375"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:11996"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:14879"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:10125"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:10065"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:11768"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:10250"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:10225"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8338"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8337"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8167"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:28441"
}
],
"solutions": [
{
"lang": "en",
"value": "RHSA-2026:13508: Red Hat Ansible Automation Platform 2.6 for RHEL 10, Red Hat Ansible Automation Platform 2.6 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:8855: Red Hat Enterprise Linux Server (v. 7 ELS)"
},
{
"lang": "en",
"value": "RHSA-2026:13512: Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:26527: Red Hat OpenShift Container Platform 4.12"
},
{
"lang": "en",
"value": "RHSA-2026:26541: Red Hat OpenShift Container Platform 4.13"
},
{
"lang": "en",
"value": "RHSA-2026:28886: Red Hat OpenShift Container Platform 4.14"
},
{
"lang": "en",
"value": "RHSA-2026:25043: Red Hat OpenShift Container Platform 4.16"
},
{
"lang": "en",
"value": "RHSA-2026:21655: Red Hat OpenShift Container Platform 4.18"
},
{
"lang": "en",
"value": "RHSA-2026:25180: Red Hat OpenShift Container Platform 4.18"
},
{
"lang": "en",
"value": "RHSA-2026:27076: Red Hat Satellite 6.16 for RHEL 8, Red Hat Satellite 6.16 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:6341: Cryostat 4 on RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:28047: Red Hat OpenStack Platform 17.1"
},
{
"lang": "en",
"value": "RHSA-2026:34365: Red Hat Satellite 6.19 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:14868: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:8314: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:9435: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:8856: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:5943: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:10133: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:8849: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:8931: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:17084: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:19719: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:19750: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:17040: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:7328: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:10929: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:16696: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:11375: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:10701: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:8842: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:7005: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:8840: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:5941: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:7992: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:6344: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:6388: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:13642: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:13643: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:7669: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:10169: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:11413: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:11412: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:19032: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:29195: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:19133: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:19022: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:19027: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:19026: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:22937: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:19049: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:19135: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:22450: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:19017: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:24386: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:19055: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:19132: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:19031: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:29035: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:19126: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:19128: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:33722: Red Hat Enterprise Linux AppStream (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:6949: Red Hat Enterprise Linux AppStream (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:16875: Red Hat Enterprise Linux AppStream (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:7011: Red Hat Enterprise Linux AppStream (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:7009: Red Hat Enterprise Linux AppStream (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:8456: Red Hat Enterprise Linux AppStream (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:7674: Red Hat Enterprise Linux AppStream (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:7878: Red Hat Enterprise Linux AppStream AUS (v. 8.2)"
},
{
"lang": "en",
"value": "RHSA-2026:8853: Red Hat Enterprise Linux AppStream AUS (v. 8.2)"
},
{
"lang": "en",
"value": "RHSA-2026:7879: Red Hat Enterprise Linux AppStream AUS (v.8.4), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)"
},
{
"lang": "en",
"value": "RHSA-2026:20581: Red Hat Enterprise Linux AppStream AUS (v.8.4), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)"
},
{
"lang": "en",
"value": "RHSA-2026:9043: Red Hat Enterprise Linux AppStream AUS (v.8.4), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)"
},
{
"lang": "en",
"value": "RHSA-2026:9094: Red Hat Enterprise Linux AppStream AUS (v.8.4), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)"
},
{
"lang": "en",
"value": "RHSA-2026:8434: Red Hat Enterprise Linux AppStream AUS (v.8.4), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)"
},
{
"lang": "en",
"value": "RHSA-2026:19634: Red Hat Enterprise Linux AppStream AUS (v.8.6), Red Hat Enterprise Linux AppStream E4S (v.8.6), Red Hat Enterprise Linux AppStream TUS (v.8.6)"
},
{
"lang": "en",
"value": "RHSA-2026:7876: Red Hat Enterprise Linux AppStream AUS (v.8.6), Red Hat Enterprise Linux AppStream E4S (v.8.6), Red Hat Enterprise Linux AppStream TUS (v.8.6)"
},
{
"lang": "en",
"value": "RHSA-2026:20582: Red Hat Enterprise Linux AppStream AUS (v.8.6), Red Hat Enterprise Linux AppStream E4S (v.8.6), Red Hat Enterprise Linux AppStream TUS (v.8.6)"
},
{
"lang": "en",
"value": "RHSA-2026:8860: Red Hat Enterprise Linux AppStream AUS (v.8.6), Red Hat Enterprise Linux AppStream E4S (v.8.6), Red Hat Enterprise Linux AppStream TUS (v.8.6)"
},
{
"lang": "en",
"value": "RHSA-2026:9093: Red Hat Enterprise Linux AppStream AUS (v.8.6), Red Hat Enterprise Linux AppStream E4S (v.8.6), Red Hat Enterprise Linux AppStream TUS (v.8.6)"
},
{
"lang": "en",
"value": "RHSA-2026:8851: Red Hat Enterprise Linux AppStream AUS (v.8.6), Red Hat Enterprise Linux AppStream E4S (v.8.6), Red Hat Enterprise Linux AppStream TUS (v.8.6)"
},
{
"lang": "en",
"value": "RHSA-2026:7877: Red Hat Enterprise Linux AppStream E4S (v.8.8), Red Hat Enterprise Linux AppStream TUS (v.8.8)"
},
{
"lang": "en",
"value": "RHSA-2026:20584: Red Hat Enterprise Linux AppStream E4S (v.8.8), Red Hat Enterprise Linux AppStream TUS (v.8.8)"
},
{
"lang": "en",
"value": "RHSA-2026:8877: Red Hat Enterprise Linux AppStream E4S (v.8.8), Red Hat Enterprise Linux AppStream TUS (v.8.8)"
},
{
"lang": "en",
"value": "RHSA-2026:8878: Red Hat Enterprise Linux AppStream E4S (v.8.8), Red Hat Enterprise Linux AppStream TUS (v.8.8)"
},
{
"lang": "en",
"value": "RHSA-2026:9695: Red Hat Enterprise Linux AppStream E4S (v.8.8), Red Hat Enterprise Linux AppStream TUS (v.8.8)"
},
{
"lang": "en",
"value": "RHSA-2026:16102: Red Hat Enterprise Linux AppStream E4S (v.9.0)"
},
{
"lang": "en",
"value": "RHSA-2026:9436: Red Hat Enterprise Linux AppStream E4S (v.9.0)"
},
{
"lang": "en",
"value": "RHSA-2026:7883: Red Hat Enterprise Linux AppStream E4S (v.9.0)"
},
{
"lang": "en",
"value": "RHSA-2026:8881: Red Hat Enterprise Linux AppStream E4S (v.9.0)"
},
{
"lang": "en",
"value": "RHSA-2026:8949: Red Hat Enterprise Linux AppStream E4S (v.9.0)"
},
{
"lang": "en",
"value": "RHSA-2026:8852: Red Hat Enterprise Linux AppStream E4S (v.9.0)"
},
{
"lang": "en",
"value": "RHSA-2026:25252: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
},
{
"lang": "en",
"value": "RHSA-2026:25251: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
},
{
"lang": "en",
"value": "RHSA-2026:9434: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
},
{
"lang": "en",
"value": "RHSA-2026:7833: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
},
{
"lang": "en",
"value": "RHSA-2026:8879: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
},
{
"lang": "en",
"value": "RHSA-2026:9090: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
},
{
"lang": "en",
"value": "RHSA-2026:25248: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
},
{
"lang": "en",
"value": "RHSA-2026:8322: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
},
{
"lang": "en",
"value": "RHSA-2026:25253: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
},
{
"lang": "en",
"value": "RHSA-2026:25250: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
},
{
"lang": "en",
"value": "RHSA-2026:22733: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:12030: Red Hat Enterprise Linux AppStream EUS (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:12032: Red Hat Enterprise Linux AppStream EUS (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:10712: Red Hat Enterprise Linux AppStream EUS (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:7834: Red Hat Enterprise Linux AppStream EUS (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:8930: Red Hat Enterprise Linux AppStream EUS (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:8882: Red Hat Enterprise Linux AppStream EUS (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:12033: Red Hat Enterprise Linux AppStream EUS (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:19721: Red Hat Enterprise Linux AppStream EUS (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:12028: Red Hat Enterprise Linux AppStream EUS (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:8324: Red Hat CodeReady Linux Builder EUS (v.9.4), Red Hat Enterprise Linux AppStream EUS (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:12031: Red Hat Enterprise Linux AppStream EUS (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:12029: Red Hat Enterprise Linux AppStream EUS (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:11749: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:9109: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:9439: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:8848: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:5944: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:8847: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:8845: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:9108: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:19720: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:19475: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:17287: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:7665: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:9097: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:9098: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:7259: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:8841: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:5942: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:6382: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:6383: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:13671: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:9044: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:7315: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:29455: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:29703: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:19350: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:19181: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:19185: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:19184: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:23228: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:19353: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:22714: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:26445: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:19207: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:29702: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:26636: Custom Metric Autoscaler 2.19"
},
{
"lang": "en",
"value": "RHSA-2026:9872: DevWorkspace Operator 0.4"
},
{
"lang": "en",
"value": "RHSA-2026:26585: Logging Subsystem for Red Hat OpenShift 6.0"
},
{
"lang": "en",
"value": "RHSA-2026:11800: Logging Subsystem for Red Hat OpenShift 6.2"
},
{
"lang": "en",
"value": "RHSA-2026:22862: Logging Subsystem for Red Hat OpenShift 6.4"
},
{
"lang": "en",
"value": "RHSA-2026:22423: Multicluster Global Hub 1.3.4"
},
{
"lang": "en",
"value": "RHSA-2026:22347: Multicluster Global Hub 1.4.5"
},
{
"lang": "en",
"value": "RHSA-2026:5110: Multicluster Global Hub 1.5.4"
},
{
"lang": "en",
"value": "RHSA-2026:21769: Multicluster Global Hub 1.5.4"
},
{
"lang": "en",
"value": "RHSA-2026:23345: Multicluster Global Hub 1.6.2"
},
{
"lang": "en",
"value": "RHSA-2026:16874: Network Observability (NETOBSERV) 1.11.2"
},
{
"lang": "en",
"value": "RHSA-2026:29854: OpenShift API for Data Protection 1.4"
},
{
"lang": "en",
"value": "RHSA-2026:26568: OpenShift API for Data Protection 1.5"
},
{
"lang": "en",
"value": "RHSA-2026:8433: OpenShift Compliance Operator 1"
},
{
"lang": "en",
"value": "RHSA-2026:22627: OpenShift File Integrity Operator - FIO 1"
},
{
"lang": "en",
"value": "RHSA-2026:25127: Red Hat Advanced Cluster Management for Kubernetes 2.14"
},
{
"lang": "en",
"value": "RHSA-2026:8151: Red Hat Advanced Cluster Management for Kubernetes 2.15"
},
{
"lang": "en",
"value": "RHSA-2026:13829: Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"lang": "en",
"value": "RHSA-2026:20889: Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"lang": "en",
"value": "RHSA-2026:11217: Red Hat Advanced Cluster Security for Kubernetes 4.8"
},
{
"lang": "en",
"value": "RHSA-2026:13791: Red Hat Advanced Cluster Security for Kubernetes 4.9"
},
{
"lang": "en",
"value": "RHSA-2026:13545: Red Hat Ansible Automation Platform 2.6"
},
{
"lang": "en",
"value": "RHSA-2026:9742: Red Hat Developer Hub 1.8"
},
{
"lang": "en",
"value": "RHSA-2026:6802: Red Hat Developer Hub 1.9"
},
{
"lang": "en",
"value": "RHSA-2026:10140: Red Hat Enterprise Linux AI 3.3"
},
{
"lang": "en",
"value": "RHSA-2026:10141: Red Hat Enterprise Linux AI 3.3"
},
{
"lang": "en",
"value": "RHSA-2026:7385: Red Hat Hardened Images"
},
{
"lang": "en",
"value": "RHSA-2026:7291: Red Hat Hardened Images"
},
{
"lang": "en",
"value": "RHSA-2026:9052: Red Hat Lightspeed (formerly Insights) for Runtimes 1"
},
{
"lang": "en",
"value": "RHSA-2026:10184: Red Hat OpenShift AI 2.25"
},
{
"lang": "en",
"value": "RHSA-2026:5549: Red Hat OpenShift Builds 1.6.5"
},
{
"lang": "en",
"value": "RHSA-2026:10158: Red Hat OpenShift Builds 1.7.3"
},
{
"lang": "en",
"value": "RHSA-2026:12282: Red Hat OpenShift Container Platform 4.12"
},
{
"lang": "en",
"value": "RHSA-2026:21696: Red Hat OpenShift Container Platform 4.12"
},
{
"lang": "en",
"value": "RHSA-2026:14100: Red Hat OpenShift Container Platform 4.12"
},
{
"lang": "en",
"value": "RHSA-2026:21691: Red Hat OpenShift Container Platform 4.13"
},
{
"lang": "en",
"value": "RHSA-2026:15091: Red Hat OpenShift Container Platform 4.14"
},
{
"lang": "en",
"value": "RHSA-2026:28893: Red Hat OpenShift Container Platform 4.14"
},
{
"lang": "en",
"value": "RHSA-2026:14774: Red Hat OpenShift Container Platform 4.15"
},
{
"lang": "en",
"value": "RHSA-2026:20088: Red Hat OpenShift Container Platform 4.16"
},
{
"lang": "en",
"value": "RHSA-2026:17598: Red Hat OpenShift Container Platform 4.17"
},
{
"lang": "en",
"value": "RHSA-2026:21657: Red Hat OpenShift Container Platform 4.18"
},
{
"lang": "en",
"value": "RHSA-2026:20041: Red Hat OpenShift Container Platform 4.19"
},
{
"lang": "en",
"value": "RHSA-2026:6564: Red Hat OpenShift Container Platform 4.20"
},
{
"lang": "en",
"value": "RHSA-2026:10175: Red Hat OpenShift Dev Spaces 3.27"
},
{
"lang": "en",
"value": "RHSA-2026:11688: Red Hat OpenShift Service Mesh 2.6"
},
{
"lang": "en",
"value": "RHSA-2026:8483: Red Hat OpenShift Service Mesh 2.6"
},
{
"lang": "en",
"value": "RHSA-2026:11686: Red Hat OpenShift Service Mesh 2.6"
},
{
"lang": "en",
"value": "RHSA-2026:9440: Red Hat OpenShift Service Mesh 3.0"
},
{
"lang": "en",
"value": "RHSA-2026:8484: Red Hat OpenShift Service Mesh 3.0"
},
{
"lang": "en",
"value": "RHSA-2026:9448: Red Hat OpenShift Service Mesh 3.1"
},
{
"lang": "en",
"value": "RHSA-2026:8490: Red Hat OpenShift Service Mesh 3.1"
},
{
"lang": "en",
"value": "RHSA-2026:9453: Red Hat OpenShift Service Mesh 3.2"
},
{
"lang": "en",
"value": "RHSA-2026:8491: Red Hat OpenShift Service Mesh 3.2"
},
{
"lang": "en",
"value": "RHSA-2026:9461: Red Hat OpenShift Service Mesh 3.3"
},
{
"lang": "en",
"value": "RHSA-2026:8493: Red Hat OpenShift Service Mesh 3.3"
},
{
"lang": "en",
"value": "RHSA-2026:9385: Red Hat OpenShift distributed tracing 3.9.3"
},
{
"lang": "en",
"value": "RHSA-2026:14020: Red Hat OpenStack 1.5"
},
{
"lang": "en",
"value": "RHSA-2026:11747: Red Hat OpenStack Services on OpenShift 18"
},
{
"lang": "en",
"value": "RHSA-2026:11916: Red Hat Quay 3.10"
},
{
"lang": "en",
"value": "RHSA-2026:6720: Red Hat Quay 3.12"
},
{
"lang": "en",
"value": "RHSA-2026:11856: Red Hat Quay 3.12"
},
{
"lang": "en",
"value": "RHSA-2026:21017: Red Hat Quay 3.14"
},
{
"lang": "en",
"value": "RHSA-2026:24853: Red Hat Quay 3.15"
},
{
"lang": "en",
"value": "RHSA-2026:19375: Red Hat Quay 3.16"
},
{
"lang": "en",
"value": "RHSA-2026:11996: Red Hat Quay 3.9"
},
{
"lang": "en",
"value": "RHSA-2026:14879: Red Hat Satellite 6.18"
},
{
"lang": "en",
"value": "RHSA-2026:10125: Red Hat Trusted Artifact Signer 1.3"
},
{
"lang": "en",
"value": "RHSA-2026:10065: Red Hat Update Infrastructure 5"
},
{
"lang": "en",
"value": "RHSA-2026:11768: Red Hat Update Infrastructure 5"
},
{
"lang": "en",
"value": "RHSA-2026:10250: Red Hat Web Terminal 1.11"
},
{
"lang": "en",
"value": "RHSA-2026:10225: Red Hat Web Terminal 1.12"
},
{
"lang": "en",
"value": "RHSA-2026:8338: Red Hat Web Terminal 1.13"
},
{
"lang": "en",
"value": "RHSA-2026:8337: Red Hat Web Terminal 1.14"
},
{
"lang": "en",
"value": "RHSA-2026:8167: Red Hat Web Terminal 1.15"
},
{
"lang": "en",
"value": "RHSA-2026:28441: mirror registry for Red Hat OpenShift 2.0"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-03-06T22:02:11.567Z",
"value": "Reported to Red Hat."
},
{
"lang": "en",
"time": "2026-03-06T21:28:14.211Z",
"value": "Made public."
}
],
"title": "net/url: Incorrect parsing of IPv6 host literals in net/url",
"workarounds": [
{
"lang": "en",
"value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."
}
],
"x_adpType": "supplier",
"x_generator": {
"engine": "sadp-cli 1.0.0"
}
}
],
"cna": {
"affected": [
{
"collectionURL": "https://pkg.go.dev",
"defaultStatus": "unaffected",
"packageName": "net/url",
"product": "net/url",
"programRoutines": [
{
"name": "parseHost"
},
{
"name": "JoinPath"
},
{
"name": "Parse"
},
{
"name": "ParseRequestURI"
},
{
"name": "URL.Parse"
},
{
"name": "URL.UnmarshalBinary"
}
],
"vendor": "Go standard library",
"versions": [
{
"lessThan": "1.25.8",
"status": "affected",
"version": "0",
"versionType": "semver"
},
{
"lessThan": "1.26.1",
"status": "affected",
"version": "1.26.0-0",
"versionType": "semver"
}
]
}
],
"credits": [
{
"lang": "en",
"value": "Masaki Hara (https://github.com/qnighy) of Wantedly"
}
],
"descriptions": [
{
"lang": "en",
"value": "url.Parse insufficiently validated the host/authority component and accepted some invalid URLs."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "CWE-1286: Improper Validation of Syntactic Correctness of Input",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-03-06T21:28:14.211Z",
"orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
"shortName": "Go"
},
"references": [
{
"url": "https://go.dev/cl/752180"
},
{
"url": "https://go.dev/issue/77578"
},
{
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"url": "https://pkg.go.dev/vuln/GO-2026-4601"
}
],
"title": "Incorrect parsing of IPv6 host literals in net/url"
}
},
"cveMetadata": {
"assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
"assignerShortName": "Go",
"cveId": "CVE-2026-25679",
"datePublished": "2026-03-06T21:28:14.211Z",
"dateReserved": "2026-02-05T01:33:41.943Z",
"dateUpdated": "2026-07-02T12:04:52.558Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2026-25679",
"date": "2026-07-02",
"epss": "0.00728",
"percentile": "0.49682"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2026-25679\",\"sourceIdentifier\":\"security@golang.org\",\"published\":\"2026-03-06T22:16:00.720\",\"lastModified\":\"2026-07-01T13:16:50.820\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.\"},{\"lang\":\"es\",\"value\":\"url.Parse valid\u00f3 insuficientemente el componente de host/autoridad y acept\u00f3 algunas URL inv\u00e1lidas.\"}],\"affected\":[{\"source\":\"security@golang.org\",\"affectedData\":[{\"vendor\":\"Go standard library\",\"product\":\"net/url\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://pkg.go.dev\",\"packageName\":\"net/url\",\"programRoutines\":[{\"name\":\"parseHost\"},{\"name\":\"JoinPath\"},{\"name\":\"Parse\"},{\"name\":\"ParseRequestURI\"},{\"name\":\"URL.Parse\"},{\"name\":\"URL.UnmarshalBinary\"}],\"versions\":[{\"version\":\"0\",\"lessThan\":\"1.25.8\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"1.26.0-0\",\"lessThan\":\"1.26.1\",\"versionType\":\"semver\",\"status\":\"affected\"}]}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"affectedData\":[{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.6 for RHEL 10\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.6::el10\",\"cpe:/a:redhat:ansible_automation_platform_developer:2.6::el10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux Server (v. 7 ELS)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:rhel_els:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.5 for RHEL 8\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.5::el8\",\"cpe:/a:redhat:ansible_automation_platform_developer:2.5::el8\",\"cpe:/a:redhat:ansible_automation_platform_inside:2.5::el8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.12\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift:4.12::el8\",\"cpe:/a:redhat:openshift:4.12::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.13\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift:4.13::el8\",\"cpe:/a:redhat:openshift:4.13::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.16\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift:4.16::el8\",\"cpe:/a:redhat:openshift:4.16::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.18\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift:4.18::el8\",\"cpe:/a:redhat:openshift:4.18::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6.16 for RHEL 8\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:satellite:6.16::el8\",\"cpe:/a:redhat:satellite_capsule:6.16::el8\",\"cpe:/a:redhat:satellite_maintenance:6.16::el8\",\"cpe:/a:redhat:satellite_utils:6.16::el8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.5 for RHEL 9\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.5::el9\",\"cpe:/a:redhat:ansible_automation_platform_developer:2.5::el9\",\"cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.6 for RHEL 9\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.6::el9\",\"cpe:/a:redhat:ansible_automation_platform_developer:2.6::el9\",\"cpe:/a:redhat:ansible_automation_platform_inside:2.6::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Cryostat 4 on RHEL 9\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:cryostat:4::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 17.1\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openstack:17.1\",\"cpe:/a:redhat:openstack:17.1::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6.16 for RHEL 9\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:satellite:6.16::el9\",\"cpe:/a:redhat:satellite_capsule:6.16::el9\",\"cpe:/a:redhat:satellite_maintenance:6.16::el9\",\"cpe:/a:redhat:satellite_utils:6.16::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream EUS (v. 10.0)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream (v. 10)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.1\",\"cpe:/o:redhat:enterprise_linux:10.2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream (v. 8)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:8::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream AUS (v. 8.2)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_aus:8.2::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream AUS (v.8.4)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_aus:8.4::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_eus_long_life:8.4::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream AUS (v.8.6)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_aus:8.6::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream E4S (v.8.6)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:8.6::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream TUS (v.8.6)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_tus:8.6::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream E4S (v.8.8)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:8.8::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream TUS (v.8.8)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_tus:8.8::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream E4S (v.9.0)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.0::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream E4S (v.9.2)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.2::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream E4S (v.9.4)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.4::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream EUS (v.9.4)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.4::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream EUS (v.9.6)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream (v. 9)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.1\",\"cpe:/o:redhat:enterprise_linux:10.2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat CodeReady Linux Builder EUS (v.9.4)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.4::crb\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat CodeReady Linux Builder EUS (v.9.6)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6::crb\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9::crb\"]},{\"vendor\":\"Red Hat\",\"product\":\"Custom Metric Autoscaler 2.19\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"DevWorkspace Operator 0.4\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:devworkspace:0.40::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logging Subsystem for Red Hat OpenShift 6.0\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:logging:6.0::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logging Subsystem for Red Hat OpenShift 6.2\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:logging:6.2::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logging Subsystem for Red Hat OpenShift 6.4\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:logging:6.4::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Global Hub 1.3.4\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:multicluster_globalhub:1.3::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Global Hub 1.4.5\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:multicluster_globalhub:1.4::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Global Hub 1.5.4\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:multicluster_globalhub:1.5::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Global Hub 1.6.2\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:multicluster_globalhub:1.6::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Network Observability (NETOBSERV) 1.11.2\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:network_observ_optr:1.11::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift API for Data Protection 1.4\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift_api_data_protection:1.4::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift API for Data Protection 1.5\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift_api_data_protection:1.5::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Compliance Operator 1\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift_compliance_operator:1::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift File Integrity Operator - FIO 1\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift_file_integrity_operator:1::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.14\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:acm:2.14::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.15\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:acm:2.15::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security for Kubernetes 4.10\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.10::el8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security for Kubernetes 4.8\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.8::el8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security for Kubernetes 4.9\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.9::el8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.6\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.6::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Developer Hub 1.8\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhdh:1.8::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Developer Hub 1.9\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhdh:1.9::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AI 3.3\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_ai:3.3::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Hardened Images\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:hummingbird:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Lightspeed (formerly Insights) for Runtimes 1\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI 2.25\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift_ai:2.25::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Builds 1.6.5\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift_builds:1.6::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Builds 1.7.3\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift_builds:1.7::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.14\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift:4.14::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.15\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift:4.15::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.17\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift:4.17::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.19\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift:4.19::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.20\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift:4.20::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Dev Spaces 3.27\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift_devspaces:3.27::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 2.6\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:service_mesh:2.6::el8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.0\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.0::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.1\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.1::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.2\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.2::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.3\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.3::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift distributed tracing 3.9.3\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift_distributed_tracing:3.9::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack 1.5\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:stf:1.5::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Services on OpenShift 18\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openstack:18.0::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.10\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:quay:3.10::el8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.12\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:quay:3.12::el8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.14\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:quay:3.14::el8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.15\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:quay:3.15::el8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.16\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:quay:3.16::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.9\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:quay:3.9::el8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6.18\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:satellite:6.18::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.3\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Update Infrastructure 5\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhui:5::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Web Terminal 1.11\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:webterminal:1.11::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Web Terminal 1.12\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:webterminal:1.12::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Web Terminal 1.13\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:webterminal:1.13::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Web Terminal 1.14\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:webterminal:1.14::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Web Terminal 1.15\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:webterminal:1.15::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"mirror registry for Red Hat OpenShift 2.0\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:mirror_registry:2.0::el8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Assisted Installer for Red Hat OpenShift Container Platform 2\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:assisted_installer:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"cert-manager Operator for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:cert_manager:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Confidential Compute Attestation\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:confidential_compute_attestation:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Deployment Validation Operator\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:deployment_validator_operator\"]},{\"vendor\":\"Red Hat\",\"product\":\"External Secrets Operator for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:external_secrets_operator:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"ExternalDNS Operator\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:ext_dns_optr:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Fence Agents Remediation Operator\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:workload_availability_far:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Gatekeeper 3\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:gatekeeper:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logging Subsystem for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:logging:5\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logical Volume Manager Storage\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:lvms:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Machine Deletion Remediation Operator\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:workload_availability_mdr:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Migration Toolkit for Applications 8\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:migration_toolkit_applications:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Migration Toolkit for Containers\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhmt:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"mirror registry for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:mirror_registry:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Developer Tools and Services\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:ocp_tools\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Lightspeed\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift_lightspeed\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Pipelines\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 2\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:service_mesh:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat 3scale API Management Platform 2\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:red_hat_3scale_amp:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Certification Program for Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:certifications:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Connectivity Link 1\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:connectivity_link:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 7\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Cluster Manager CLI\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift_cluster_manager_cli:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift GitOps\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift_gitops:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift on AWS\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift_service_on_aws:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Virtualization 4\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 16.2\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openstack:16.2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 18.0\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openstack:18.0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:quay:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:satellite:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Service Interconnect 1\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:service_interconnect:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Service Interconnect 2\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:service_interconnect:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Security Profiles Operator\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift_security_profiles_operator:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"streams for Apache Kafka 3\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:amq_streams:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Zero Trust Workload Identity Manager\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:zero_trust_workload_identity_manager:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Zero Trust Workload Identity Manager - Tech Preview\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:zero_trust_workload_identity_manager:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Node HealthCheck Operator\",\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:/a:redhat:workload_availability_nhc:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Power monitoring for Red Hat OpenShift\",\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:/a:redhat:openshift_power_monitoring\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat AMQ Clients\",\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:/a:redhat:amq_clients:2023\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat build of Apache Camel - HawtIO 4\",\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:/a:redhat:apache_camel_hawtio:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift for Windows Containers\",\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:/a:redhat:windows_machine_config\"]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-03-10T13:36:26.554241Z\",\"id\":\"CVE-2026-25679\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"yes\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-425\"}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-1286\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.25.8\",\"matchCriteriaId\":\"2D293CC0-B163-4E62-B985-52FB6ECA64C5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:golang:go:1.26.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A40FE3CB-0D03-462B-8A19-4DF1920ABE82\"}]}]}],\"references\":[{\"url\":\"https://go.dev/cl/752180\",\"source\":\"security@golang.org\",\"tags\":[\"Mailing List\"]},{\"url\":\"https://go.dev/issue/77578\",\"source\":\"security@golang.org\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk\",\"source\":\"security@golang.org\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://pkg.go.dev/vuln/GO-2026-4601\",\"source\":\"security@golang.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:10065\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:10125\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:10133\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:10140\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:10141\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:10158\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:10169\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:10175\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:10184\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:10225\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:10250\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:10701\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:10712\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:10929\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:11217\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:11375\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:11412\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:11413\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:11686\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:11688\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:11747\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:11749\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:11768\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:11800\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:11856\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:11916\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:11996\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:12028\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:12029\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:12030\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:12031\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:12032\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:12033\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:12282\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:13508\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:13512\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:13545\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:13642\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:13643\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:13671\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:13791\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:13829\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:14020\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:14100\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:14774\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:14868\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:14879\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:15091\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:16102\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:16696\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:16874\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:16875\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:17040\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:17084\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:17287\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:17598\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19017\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19022\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19026\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19027\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19031\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19032\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19049\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19055\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19126\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19128\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19132\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19133\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19135\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19181\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19184\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19185\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19207\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19350\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19353\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19375\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19475\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19634\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19719\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19720\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19721\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19750\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20041\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20088\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20581\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20582\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20584\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20889\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:21017\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:21655\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:21657\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:21691\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:21696\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:21769\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22347\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22423\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22450\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22627\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22714\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22733\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22862\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22937\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:23228\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:23345\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:24386\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:24853\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:25043\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:25127\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:25180\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:25248\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:25250\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:25251\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:25252\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:25253\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:26445\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:26527\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:26541\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:26568\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:26585\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:26636\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:27076\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:28047\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:28441\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:29035\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:29195\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:29455\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:29702\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:29703\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:29854\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:33722\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:5110\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:5549\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:5941\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:5942\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:5943\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:5944\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:6341\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:6344\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:6382\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:6383\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:6388\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:6564\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:6720\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:6802\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:6949\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:7005\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:7009\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:7011\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:7259\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:7291\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:7315\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:7328\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:7385\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:7665\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:7669\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:7674\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:7833\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:7834\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:7876\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:7877\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:7878\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:7879\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:7883\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:7992\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8151\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8167\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8314\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8322\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8324\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8337\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8338\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8433\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8434\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8456\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8483\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8484\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8490\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8491\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8493\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8840\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8841\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8842\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8845\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8847\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8848\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8849\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8851\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8852\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8853\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8855\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8856\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8860\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8877\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8878\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8879\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8881\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8882\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8930\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8931\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8949\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:9043\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:9044\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:9052\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:9090\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:9093\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:9094\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:9097\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:9098\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:9108\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:9109\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:9385\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:9434\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:9435\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:9436\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:9439\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:9440\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:9448\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:9453\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:9461\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:9695\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:9742\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:9872\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/security/cve/CVE-2026-25679\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=2445356\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25679.json\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"}]}}",
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"net/url: Incorrect parsing of IPv6 host literals in net/url\", \"metrics\": [{\"other\": {\"type\": \"Red Hat severity rating\", \"content\": {\"value\": \"Important\", \"namespace\": \"https://access.redhat.com/security/updates/classification/\"}}}, {\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.5, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}], \"affected\": [{\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.6::el10\", \"cpe:/a:redhat:ansible_automation_platform_developer:2.6::el10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.6 for RHEL 10\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_els:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux Server (v. 7 ELS)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.5::el8\", \"cpe:/a:redhat:ansible_automation_platform_developer:2.5::el8\", \"cpe:/a:redhat:ansible_automation_platform_inside:2.5::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.5 for RHEL 8\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.12::el8\", \"cpe:/a:redhat:openshift:4.12::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.12\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.13::el8\", \"cpe:/a:redhat:openshift:4.13::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.13\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.14::el8\", \"cpe:/a:redhat:openshift:4.14::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.14\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.16::el8\", \"cpe:/a:redhat:openshift:4.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.16\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.18::el8\", \"cpe:/a:redhat:openshift:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.18\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6.16::el8\", \"cpe:/a:redhat:satellite_capsule:6.16::el8\", \"cpe:/a:redhat:satellite_maintenance:6.16::el8\", \"cpe:/a:redhat:satellite_utils:6.16::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.16 for RHEL 8\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.5::el9\", \"cpe:/a:redhat:ansible_automation_platform_developer:2.5::el9\", \"cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.5 for RHEL 9\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.6::el9\", \"cpe:/a:redhat:ansible_automation_platform_developer:2.6::el9\", \"cpe:/a:redhat:ansible_automation_platform_inside:2.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.6 for RHEL 9\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cryostat:4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Cryostat 4 on RHEL 9\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:17.1\", \"cpe:/a:redhat:openstack:17.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 17.1\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6.16::el9\", \"cpe:/a:redhat:satellite_capsule:6.16::el9\", \"cpe:/a:redhat:satellite_maintenance:6.16::el9\", \"cpe:/a:redhat:satellite_utils:6.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.16 for RHEL 9\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6.19::el9\", \"cpe:/a:redhat:satellite_capsule:6.19::el9\", \"cpe:/a:redhat:satellite_maintenance:6.19::el9\", \"cpe:/a:redhat:satellite_utils:6.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.19 for RHEL 9\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream EUS (v. 10.0)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.1\", \"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream (v. 10)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:8::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream (v. 8)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.2::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream AUS (v. 8.2)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.4::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream AUS (v.8.4)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus_long_life:8.4::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.6::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream AUS (v.8.6)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:8.6::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream E4S (v.8.6)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_tus:8.6::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream TUS (v.8.6)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:8.8::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream E4S (v.8.8)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_tus:8.8::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream TUS (v.8.8)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.0::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream E4S (v.9.0)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.2::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream E4S (v.9.2)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.4::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream E4S (v.9.4)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.4::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream EUS (v.9.4)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.6::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream EUS (v.9.6)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream (v. 9)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.1\", \"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.4::crb\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat CodeReady Linux Builder EUS (v.9.4)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.6::crb\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat CodeReady Linux Builder EUS (v.9.6)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9::crb\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Custom Metric Autoscaler 2.19\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:devworkspace:0.40::el9\"], \"vendor\": \"Red Hat\", \"product\": \"DevWorkspace Operator 0.4\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:6.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Logging Subsystem for Red Hat OpenShift 6.0\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:6.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Logging Subsystem for Red Hat OpenShift 6.2\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:6.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Logging Subsystem for Red Hat OpenShift 6.4\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_globalhub:1.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Global Hub 1.3.4\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_globalhub:1.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Global Hub 1.4.5\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_globalhub:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Global Hub 1.5.4\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_globalhub:1.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Global Hub 1.6.2\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:network_observ_optr:1.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Network Observability (NETOBSERV) 1.11.2\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_api_data_protection:1.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift API for Data Protection 1.4\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_api_data_protection:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift API for Data Protection 1.5\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_compliance_operator:1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Compliance Operator 1\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_file_integrity_operator:1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift File Integrity Operator - FIO 1\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.14::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.14\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.15::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.15\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.10::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security for Kubernetes 4.10\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.8::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security for Kubernetes 4.8\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.9::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security for Kubernetes 4.9\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.6\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhdh:1.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Developer Hub 1.8\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhdh:1.9::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Developer Hub 1.9\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux_ai:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AI 3.3\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:hummingbird:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Hardened Images\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Lightspeed (formerly Insights) for Runtimes 1\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai:2.25::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI 2.25\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_builds:1.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Builds 1.6.5\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_builds:1.7::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Builds 1.7.3\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.15::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.15\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.17\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.19\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.20\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_devspaces:3.27::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Dev Spaces 3.27\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:2.6::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 2.6\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.0\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.1\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.2\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.3\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_distributed_tracing:3.9::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift distributed tracing 3.9.3\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:stf:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack 1.5\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:18.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Services on OpenShift 18\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.10::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.10\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.12::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.12\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.14::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.14\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.15::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.15\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.16\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.9::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.9\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.18\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.3\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhui:5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Update Infrastructure 5\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:webterminal:1.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Web Terminal 1.11\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:webterminal:1.12::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Web Terminal 1.12\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:webterminal:1.13::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Web Terminal 1.13\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:webterminal:1.14::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Web Terminal 1.14\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:webterminal:1.15::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Web Terminal 1.15\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:mirror_registry:2.0::el8\"], \"vendor\": \"Red Hat\", \"product\": \"mirror registry for Red Hat OpenShift 2.0\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:assisted_installer:2\"], \"vendor\": \"Red Hat\", \"product\": \"Assisted Installer for Red Hat OpenShift Container Platform 2\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cert_manager:1\"], \"vendor\": \"Red Hat\", \"product\": \"cert-manager Operator for Red Hat OpenShift\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:confidential_compute_attestation:1\"], \"vendor\": \"Red Hat\", \"product\": \"Confidential Compute Attestation\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:deployment_validator_operator\"], \"vendor\": \"Red Hat\", \"product\": \"Deployment Validation Operator\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:external_secrets_operator:1\"], \"vendor\": \"Red Hat\", \"product\": \"External Secrets Operator for Red Hat OpenShift\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ext_dns_optr:1\"], \"vendor\": \"Red Hat\", \"product\": \"ExternalDNS Operator\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_far:0\"], \"vendor\": \"Red Hat\", \"product\": \"Fence Agents Remediation Operator\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:gatekeeper:3\"], \"vendor\": \"Red Hat\", \"product\": \"Gatekeeper 3\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:5\"], \"vendor\": \"Red Hat\", \"product\": \"Logging Subsystem for Red Hat OpenShift\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:lvms:4\"], \"vendor\": \"Red Hat\", \"product\": \"Logical Volume Manager Storage\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_mdr:0\"], \"vendor\": \"Red Hat\", \"product\": \"Machine Deletion Remediation Operator\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhmt:1\"], \"vendor\": \"Red Hat\", \"product\": \"Migration Toolkit for Containers\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:mirror_registry:1\"], \"vendor\": \"Red Hat\", \"product\": \"mirror registry for Red Hat OpenShift\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ocp_tools\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Developer Tools and Services\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_lightspeed\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Lightspeed\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_pipelines:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Pipelines\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:2\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 2\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:red_hat_3scale_amp:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat 3scale API Management Platform 2\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:certifications:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Certification Program for Red Hat Enterprise Linux 9\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:connectivity_link:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Connectivity Link 1\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 7\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_cluster_manager_cli:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Cluster Manager CLI\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_gitops:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift GitOps\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_service_on_aws:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift on AWS\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:container_native_virtualization:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Virtualization 4\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:16.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 16.2\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:18.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 18.0\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_interconnect:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Service Interconnect 1\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_interconnect:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Service Interconnect 2\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_security_profiles_operator:1\"], \"vendor\": \"Red Hat\", \"product\": \"Security Profiles Operator\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:amq_streams:3\"], \"vendor\": \"Red Hat\", \"product\": \"streams for Apache Kafka 3\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:zero_trust_workload_identity_manager:1\"], \"vendor\": \"Red Hat\", \"product\": \"Zero Trust Workload Identity Manager\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:zero_trust_workload_identity_manager:0\"], \"vendor\": \"Red Hat\", \"product\": \"Zero Trust Workload Identity Manager - Tech Preview\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:migration_toolkit_applications:8\"], \"vendor\": \"Red Hat\", \"product\": \"Migration Toolkit for Applications 8\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_nhc:0\"], \"vendor\": \"Red Hat\", \"product\": \"Node HealthCheck Operator\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_power_monitoring\"], \"vendor\": \"Red Hat\", \"product\": \"Power monitoring for Red Hat OpenShift\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:amq_clients:2023\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat AMQ Clients\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:apache_camel_hawtio:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat build of Apache Camel - HawtIO 4\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:windows_machine_config\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift for Windows Containers\", \"defaultStatus\": \"unaffected\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2026-03-06T22:02:11.567Z\", \"value\": \"Reported to Red Hat.\"}, {\"lang\": \"en\", \"time\": \"2026-03-06T21:28:14.211Z\", \"value\": \"Made public.\"}], \"solutions\": [{\"lang\": \"en\", \"value\": \"RHSA-2026:13508: Red Hat Ansible Automation Platform 2.6 for RHEL 10, Red Hat Ansible Automation Platform 2.6 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:8855: Red Hat Enterprise Linux Server (v. 7 ELS)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:13512: Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:26527: Red Hat OpenShift Container Platform 4.12\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:26541: Red Hat OpenShift Container Platform 4.13\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:28886: Red Hat OpenShift Container Platform 4.14\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:25043: Red Hat OpenShift Container Platform 4.16\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:21655: Red Hat OpenShift Container Platform 4.18\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:25180: Red Hat OpenShift Container Platform 4.18\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:27076: Red Hat Satellite 6.16 for RHEL 8, Red Hat Satellite 6.16 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:6341: Cryostat 4 on RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:28047: Red Hat OpenStack Platform 17.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:34365: Red Hat Satellite 6.19 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:14868: Red Hat Enterprise Linux AppStream EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:8314: Red Hat Enterprise Linux AppStream EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:9435: Red Hat Enterprise Linux AppStream EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:8856: Red Hat Enterprise Linux AppStream EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:5943: Red Hat Enterprise Linux AppStream EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:10133: Red Hat Enterprise Linux AppStream EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:8849: Red Hat Enterprise Linux AppStream EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:8931: Red Hat Enterprise Linux AppStream EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:17084: Red Hat Enterprise Linux AppStream EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19719: Red Hat Enterprise Linux AppStream EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19750: Red Hat Enterprise Linux AppStream EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:17040: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:7328: Red Hat Enterprise Linux AppStream EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:10929: Red Hat Enterprise Linux AppStream EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:16696: Red Hat Enterprise Linux AppStream EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:11375: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:10701: Red Hat Enterprise Linux AppStream EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:8842: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:7005: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:8840: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:5941: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:7992: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:6344: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:6388: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:13642: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:13643: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:7669: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:10169: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:11413: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:11412: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19032: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:29195: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19133: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19022: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19027: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19026: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:22937: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19049: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19135: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:22450: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19017: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:24386: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19055: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19132: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19031: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:29035: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19126: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19128: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:33722: Red Hat Enterprise Linux AppStream (v. 8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:6949: Red Hat Enterprise Linux AppStream (v. 8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:16875: Red Hat Enterprise Linux AppStream (v. 8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:7011: Red Hat Enterprise Linux AppStream (v. 8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:7009: Red Hat Enterprise Linux AppStream (v. 8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:8456: Red Hat Enterprise Linux AppStream (v. 8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:7674: Red Hat Enterprise Linux AppStream (v. 8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:7878: Red Hat Enterprise Linux AppStream AUS (v. 8.2)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:8853: Red Hat Enterprise Linux AppStream AUS (v. 8.2)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:7879: Red Hat Enterprise Linux AppStream AUS (v.8.4), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:20581: Red Hat Enterprise Linux AppStream AUS (v.8.4), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:9043: Red Hat Enterprise Linux AppStream AUS (v.8.4), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:9094: Red Hat Enterprise Linux AppStream AUS (v.8.4), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:8434: Red Hat Enterprise Linux AppStream AUS (v.8.4), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19634: Red Hat Enterprise Linux AppStream AUS (v.8.6), Red Hat Enterprise Linux AppStream E4S (v.8.6), Red Hat Enterprise Linux AppStream TUS (v.8.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:7876: Red Hat Enterprise Linux AppStream AUS (v.8.6), Red Hat Enterprise Linux AppStream E4S (v.8.6), Red Hat Enterprise Linux AppStream TUS (v.8.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:20582: Red Hat Enterprise Linux AppStream AUS (v.8.6), Red Hat Enterprise Linux AppStream E4S (v.8.6), Red Hat Enterprise Linux AppStream TUS (v.8.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:8860: Red Hat Enterprise Linux AppStream AUS (v.8.6), Red Hat Enterprise Linux AppStream E4S (v.8.6), Red Hat Enterprise Linux AppStream TUS (v.8.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:9093: Red Hat Enterprise Linux AppStream AUS (v.8.6), Red Hat Enterprise Linux AppStream E4S (v.8.6), Red Hat Enterprise Linux AppStream TUS (v.8.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:8851: Red Hat Enterprise Linux AppStream AUS (v.8.6), Red Hat Enterprise Linux AppStream E4S (v.8.6), Red Hat Enterprise Linux AppStream TUS (v.8.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:7877: Red Hat Enterprise Linux AppStream E4S (v.8.8), Red Hat Enterprise Linux AppStream TUS (v.8.8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:20584: Red Hat Enterprise Linux AppStream E4S (v.8.8), Red Hat Enterprise Linux AppStream TUS (v.8.8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:8877: Red Hat Enterprise Linux AppStream E4S (v.8.8), Red Hat Enterprise Linux AppStream TUS (v.8.8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:8878: Red Hat Enterprise Linux AppStream E4S (v.8.8), Red Hat Enterprise Linux AppStream TUS (v.8.8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:9695: Red Hat Enterprise Linux AppStream E4S (v.8.8), Red Hat Enterprise Linux AppStream TUS (v.8.8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:16102: Red Hat Enterprise Linux AppStream E4S (v.9.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:9436: Red Hat Enterprise Linux AppStream E4S (v.9.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:7883: Red Hat Enterprise Linux AppStream E4S (v.9.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:8881: Red Hat Enterprise Linux AppStream E4S (v.9.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:8949: Red Hat Enterprise Linux AppStream E4S (v.9.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:8852: Red Hat Enterprise Linux AppStream E4S (v.9.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:25252: Red Hat Enterprise Linux AppStream E4S (v.9.2)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:25251: Red Hat Enterprise Linux AppStream E4S (v.9.2)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:9434: Red Hat Enterprise Linux AppStream E4S (v.9.2)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:7833: Red Hat Enterprise Linux AppStream E4S (v.9.2)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:8879: Red Hat Enterprise Linux AppStream E4S (v.9.2)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:9090: Red Hat Enterprise Linux AppStream E4S (v.9.2)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:25248: Red Hat Enterprise Linux AppStream E4S (v.9.2)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:8322: Red Hat Enterprise Linux AppStream E4S (v.9.2)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:25253: Red Hat Enterprise Linux AppStream E4S (v.9.2)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:25250: Red Hat Enterprise Linux AppStream E4S (v.9.2)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:22733: Red Hat Enterprise Linux AppStream E4S (v.9.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:12030: Red Hat Enterprise Linux AppStream EUS (v.9.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:12032: Red Hat Enterprise Linux AppStream EUS (v.9.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:10712: Red Hat Enterprise Linux AppStream EUS (v.9.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:7834: Red Hat Enterprise Linux AppStream EUS (v.9.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:8930: Red Hat Enterprise Linux AppStream EUS (v.9.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:8882: Red Hat Enterprise Linux AppStream EUS (v.9.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:12033: Red Hat Enterprise Linux AppStream EUS (v.9.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19721: Red Hat Enterprise Linux AppStream EUS (v.9.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:12028: Red Hat Enterprise Linux AppStream EUS (v.9.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:8324: Red Hat CodeReady Linux Builder EUS (v.9.4), Red Hat Enterprise Linux AppStream EUS (v.9.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:12031: Red Hat Enterprise Linux AppStream EUS (v.9.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:12029: Red Hat Enterprise Linux AppStream EUS (v.9.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:11749: Red Hat Enterprise Linux AppStream EUS (v.9.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:9109: Red Hat Enterprise Linux AppStream EUS (v.9.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:9439: Red Hat Enterprise Linux AppStream EUS (v.9.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:8848: Red Hat Enterprise Linux AppStream EUS (v.9.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:5944: Red Hat Enterprise Linux AppStream EUS (v.9.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:8847: Red Hat Enterprise Linux AppStream EUS (v.9.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:8845: Red Hat Enterprise Linux AppStream EUS (v.9.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:9108: Red Hat Enterprise Linux AppStream EUS (v.9.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19720: Red Hat Enterprise Linux AppStream EUS (v.9.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19475: Red Hat Enterprise Linux AppStream EUS (v.9.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:17287: Red Hat Enterprise Linux AppStream EUS (v.9.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:7665: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream EUS (v.9.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:9097: Red Hat Enterprise Linux AppStream EUS (v.9.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:9098: Red Hat Enterprise Linux AppStream EUS (v.9.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:7259: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:8841: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:5942: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:6382: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:6383: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:13671: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:9044: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:7315: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:29455: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:29703: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19350: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19181: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19185: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19184: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:23228: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19353: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:22714: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:26445: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19207: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:29702: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:26636: Custom Metric Autoscaler 2.19\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:9872: DevWorkspace Operator 0.4\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:26585: Logging Subsystem for Red Hat OpenShift 6.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:11800: Logging Subsystem for Red Hat OpenShift 6.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:22862: Logging Subsystem for Red Hat OpenShift 6.4\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:22423: Multicluster Global Hub 1.3.4\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:22347: Multicluster Global Hub 1.4.5\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:5110: Multicluster Global Hub 1.5.4\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:21769: Multicluster Global Hub 1.5.4\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:23345: Multicluster Global Hub 1.6.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:16874: Network Observability (NETOBSERV) 1.11.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:29854: OpenShift API for Data Protection 1.4\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:26568: OpenShift API for Data Protection 1.5\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:8433: OpenShift Compliance Operator 1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:22627: OpenShift File Integrity Operator - FIO 1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:25127: Red Hat Advanced Cluster Management for Kubernetes 2.14\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:8151: Red Hat Advanced Cluster Management for Kubernetes 2.15\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:13829: Red Hat Advanced Cluster Security for Kubernetes 4.10\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:20889: Red Hat Advanced Cluster Security for Kubernetes 4.10\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:11217: Red Hat Advanced Cluster Security for Kubernetes 4.8\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:13791: Red Hat Advanced Cluster Security for Kubernetes 4.9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:13545: Red Hat Ansible Automation Platform 2.6\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:9742: Red Hat Developer Hub 1.8\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:6802: Red Hat Developer Hub 1.9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:10140: Red Hat Enterprise Linux AI 3.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:10141: Red Hat Enterprise Linux AI 3.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:7385: Red Hat Hardened Images\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:7291: Red Hat Hardened Images\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:9052: Red Hat Lightspeed (formerly Insights) for Runtimes 1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:10184: Red Hat OpenShift AI 2.25\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:5549: Red Hat OpenShift Builds 1.6.5\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:10158: Red Hat OpenShift Builds 1.7.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:12282: Red Hat OpenShift Container Platform 4.12\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:21696: Red Hat OpenShift Container Platform 4.12\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:14100: Red Hat OpenShift Container Platform 4.12\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:21691: Red Hat OpenShift Container Platform 4.13\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:15091: Red Hat OpenShift Container Platform 4.14\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:28893: Red Hat OpenShift Container Platform 4.14\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:14774: Red Hat OpenShift Container Platform 4.15\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:20088: Red Hat OpenShift Container Platform 4.16\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:17598: Red Hat OpenShift Container Platform 4.17\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:21657: Red Hat OpenShift Container Platform 4.18\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:20041: Red Hat OpenShift Container Platform 4.19\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:6564: Red Hat OpenShift Container Platform 4.20\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:10175: Red Hat OpenShift Dev Spaces 3.27\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:11688: Red Hat OpenShift Service Mesh 2.6\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:8483: Red Hat OpenShift Service Mesh 2.6\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:11686: Red Hat OpenShift Service Mesh 2.6\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:9440: Red Hat OpenShift Service Mesh 3.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:8484: Red Hat OpenShift Service Mesh 3.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:9448: Red Hat OpenShift Service Mesh 3.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:8490: Red Hat OpenShift Service Mesh 3.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:9453: Red Hat OpenShift Service Mesh 3.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:8491: Red Hat OpenShift Service Mesh 3.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:9461: Red Hat OpenShift Service Mesh 3.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:8493: Red Hat OpenShift Service Mesh 3.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:9385: Red Hat OpenShift distributed tracing 3.9.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:14020: Red Hat OpenStack 1.5\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:11747: Red Hat OpenStack Services on OpenShift 18\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:11916: Red Hat Quay 3.10\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:6720: Red Hat Quay 3.12\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:11856: Red Hat Quay 3.12\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:21017: Red Hat Quay 3.14\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:24853: Red Hat Quay 3.15\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19375: Red Hat Quay 3.16\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:11996: Red Hat Quay 3.9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:14879: Red Hat Satellite 6.18\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:10125: Red Hat Trusted Artifact Signer 1.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:10065: Red Hat Update Infrastructure 5\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:11768: Red Hat Update Infrastructure 5\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:10250: Red Hat Web Terminal 1.11\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:10225: Red Hat Web Terminal 1.12\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:8338: Red Hat Web Terminal 1.13\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:8337: Red Hat Web Terminal 1.14\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:8167: Red Hat Web Terminal 1.15\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:28441: mirror registry for Red Hat OpenShift 2.0\"}], \"x_adpType\": \"supplier\", \"datePublic\": \"2026-03-06T21:28:14.211Z\", \"references\": [{\"url\": \"https://access.redhat.com/security/cve/CVE-2026-25679\", \"tags\": [\"vdb-entry\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=2445356\", \"name\": \"RHBZ#2445356\", \"tags\": [\"issue-tracking\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25679.json\", \"tags\": [\"x_sadp-csaf-vex\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:13508\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8855\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:13512\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:26527\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:26541\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:28886\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:25043\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:21655\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:25180\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:27076\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:6341\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:28047\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:34365\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:14868\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8314\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:9435\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8856\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:5943\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:10133\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8849\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8931\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:17084\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19719\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19750\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:17040\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:7328\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:10929\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:16696\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:11375\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:10701\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8842\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:7005\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8840\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:5941\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:7992\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:6344\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:6388\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:13642\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:13643\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:7669\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:10169\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:11413\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:11412\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19032\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:29195\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19133\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19022\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19027\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19026\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:22937\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19049\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19135\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:22450\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19017\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:24386\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19055\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19132\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19031\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:29035\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19126\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19128\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:33722\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:6949\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:16875\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:7011\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:7009\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8456\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:7674\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:7878\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8853\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:7879\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:20581\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:9043\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:9094\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8434\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19634\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:7876\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:20582\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8860\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:9093\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8851\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:7877\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:20584\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8877\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8878\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:9695\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:16102\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:9436\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:7883\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8881\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8949\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8852\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:25252\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:25251\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:9434\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:7833\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8879\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:9090\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:25248\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8322\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:25253\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:25250\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:22733\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:12030\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:12032\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:10712\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:7834\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8930\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8882\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:12033\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19721\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:12028\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8324\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:12031\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:12029\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:11749\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:9109\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:9439\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8848\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:5944\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8847\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8845\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:9108\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19720\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19475\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:17287\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:7665\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:9097\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:9098\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:7259\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8841\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:5942\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:6382\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:6383\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:13671\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:9044\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:7315\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:29455\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:29703\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19350\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19181\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19185\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19184\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:23228\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19353\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:22714\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:26445\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19207\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:29702\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:26636\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:9872\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:26585\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:11800\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:22862\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:22423\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:22347\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:5110\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:21769\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:23345\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:16874\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:29854\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:26568\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8433\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:22627\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:25127\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8151\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:13829\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:20889\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:11217\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:13791\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:13545\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:9742\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:6802\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:10140\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:10141\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:7385\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:7291\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:9052\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:10184\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:5549\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:10158\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:12282\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:21696\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:14100\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:21691\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:15091\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:28893\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:14774\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:20088\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:17598\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:21657\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:20041\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:6564\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:10175\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:11688\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8483\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:11686\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:9440\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8484\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:9448\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8490\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:9453\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8491\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:9461\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8493\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:9385\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:14020\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:11747\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:11916\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:6720\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:11856\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:21017\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:24853\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19375\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:11996\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:14879\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:10125\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:10065\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:11768\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:10250\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:10225\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8338\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8337\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8167\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:28441\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}], \"workarounds\": [{\"lang\": \"en\", \"value\": \"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.\"}], \"x_generator\": {\"engine\": \"sadp-cli 1.0.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-1286\", \"description\": \"Improper Validation of Syntactic Correctness of Input\"}]}], \"providerMetadata\": {\"orgId\": \"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\", \"shortName\": \"redhat-SADP\", \"dateUpdated\": \"2026-07-02T12:04:52.558Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.5, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-25679\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-03-10T13:36:26.554241Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-03-10T13:36:57.330Z\"}}], \"cna\": {\"title\": \"Incorrect parsing of IPv6 host literals in net/url\", \"credits\": [{\"lang\": \"en\", \"value\": \"Masaki Hara (https://github.com/qnighy) of Wantedly\"}], \"affected\": [{\"vendor\": \"Go standard library\", \"product\": \"net/url\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"1.25.8\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"1.26.0-0\", \"lessThan\": \"1.26.1\", \"versionType\": \"semver\"}], \"packageName\": \"net/url\", \"collectionURL\": \"https://pkg.go.dev\", \"defaultStatus\": \"unaffected\", \"programRoutines\": [{\"name\": \"parseHost\"}, {\"name\": \"JoinPath\"}, {\"name\": \"Parse\"}, {\"name\": \"ParseRequestURI\"}, {\"name\": \"URL.Parse\"}, {\"name\": \"URL.UnmarshalBinary\"}]}], \"references\": [{\"url\": \"https://go.dev/cl/752180\"}, {\"url\": \"https://go.dev/issue/77578\"}, {\"url\": \"https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk\"}, {\"url\": \"https://pkg.go.dev/vuln/GO-2026-4601\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"description\": \"CWE-1286: Improper Validation of Syntactic Correctness of Input\"}]}], \"providerMetadata\": {\"orgId\": \"1bb62c36-49e3-4200-9d77-64a1400537cc\", \"shortName\": \"Go\", \"dateUpdated\": \"2026-03-06T21:28:14.211Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2026-25679\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-07-02T12:04:52.558Z\", \"dateReserved\": \"2026-02-05T01:33:41.943Z\", \"assignerOrgId\": \"1bb62c36-49e3-4200-9d77-64a1400537cc\", \"datePublished\": \"2026-03-06T21:28:14.211Z\", \"assignerShortName\": \"Go\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
OPENSUSE-SU-2026:10310-1
Vulnerability from csaf_opensuse - Published: 2026-03-08 00:00 - Updated: 2026-03-08 00:00| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:go1.25-1.25.8-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:go1.25-1.25.8-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:go1.25-1.25.8-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:go1.25-1.25.8-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:go1.25-doc-1.25.8-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:go1.25-doc-1.25.8-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:go1.25-doc-1.25.8-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:go1.25-doc-1.25.8-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:go1.25-libstd-1.25.8-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:go1.25-libstd-1.25.8-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:go1.25-libstd-1.25.8-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:go1.25-libstd-1.25.8-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:go1.25-race-1.25.8-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:go1.25-race-1.25.8-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:go1.25-race-1.25.8-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:go1.25-race-1.25.8-1.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:go1.25-1.25.8-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:go1.25-1.25.8-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:go1.25-1.25.8-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:go1.25-1.25.8-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:go1.25-doc-1.25.8-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:go1.25-doc-1.25.8-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:go1.25-doc-1.25.8-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:go1.25-doc-1.25.8-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:go1.25-libstd-1.25.8-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:go1.25-libstd-1.25.8-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:go1.25-libstd-1.25.8-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:go1.25-libstd-1.25.8-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:go1.25-race-1.25.8-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:go1.25-race-1.25.8-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:go1.25-race-1.25.8-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:go1.25-race-1.25.8-1.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:go1.25-1.25.8-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:go1.25-1.25.8-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:go1.25-1.25.8-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:go1.25-1.25.8-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:go1.25-doc-1.25.8-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:go1.25-doc-1.25.8-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:go1.25-doc-1.25.8-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:go1.25-doc-1.25.8-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:go1.25-libstd-1.25.8-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:go1.25-libstd-1.25.8-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:go1.25-libstd-1.25.8-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:go1.25-libstd-1.25.8-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:go1.25-race-1.25.8-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:go1.25-race-1.25.8-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:go1.25-race-1.25.8-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:go1.25-race-1.25.8-1.1.x86_64 | — |
Vendor Fix
|
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "go1.25-1.25.8-1.1 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the go1.25-1.25.8-1.1 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2026-10310",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_10310-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-25679 page",
"url": "https://www.suse.com/security/cve/CVE-2026-25679/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-27139 page",
"url": "https://www.suse.com/security/cve/CVE-2026-27139/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-27142 page",
"url": "https://www.suse.com/security/cve/CVE-2026-27142/"
}
],
"title": "go1.25-1.25.8-1.1 on GA media",
"tracking": {
"current_release_date": "2026-03-08T00:00:00Z",
"generator": {
"date": "2026-03-08T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2026:10310-1",
"initial_release_date": "2026-03-08T00:00:00Z",
"revision_history": [
{
"date": "2026-03-08T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "go1.25-1.25.8-1.1.aarch64",
"product": {
"name": "go1.25-1.25.8-1.1.aarch64",
"product_id": "go1.25-1.25.8-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "go1.25-doc-1.25.8-1.1.aarch64",
"product": {
"name": "go1.25-doc-1.25.8-1.1.aarch64",
"product_id": "go1.25-doc-1.25.8-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "go1.25-libstd-1.25.8-1.1.aarch64",
"product": {
"name": "go1.25-libstd-1.25.8-1.1.aarch64",
"product_id": "go1.25-libstd-1.25.8-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "go1.25-race-1.25.8-1.1.aarch64",
"product": {
"name": "go1.25-race-1.25.8-1.1.aarch64",
"product_id": "go1.25-race-1.25.8-1.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "go1.25-1.25.8-1.1.ppc64le",
"product": {
"name": "go1.25-1.25.8-1.1.ppc64le",
"product_id": "go1.25-1.25.8-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "go1.25-doc-1.25.8-1.1.ppc64le",
"product": {
"name": "go1.25-doc-1.25.8-1.1.ppc64le",
"product_id": "go1.25-doc-1.25.8-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "go1.25-libstd-1.25.8-1.1.ppc64le",
"product": {
"name": "go1.25-libstd-1.25.8-1.1.ppc64le",
"product_id": "go1.25-libstd-1.25.8-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "go1.25-race-1.25.8-1.1.ppc64le",
"product": {
"name": "go1.25-race-1.25.8-1.1.ppc64le",
"product_id": "go1.25-race-1.25.8-1.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "go1.25-1.25.8-1.1.s390x",
"product": {
"name": "go1.25-1.25.8-1.1.s390x",
"product_id": "go1.25-1.25.8-1.1.s390x"
}
},
{
"category": "product_version",
"name": "go1.25-doc-1.25.8-1.1.s390x",
"product": {
"name": "go1.25-doc-1.25.8-1.1.s390x",
"product_id": "go1.25-doc-1.25.8-1.1.s390x"
}
},
{
"category": "product_version",
"name": "go1.25-libstd-1.25.8-1.1.s390x",
"product": {
"name": "go1.25-libstd-1.25.8-1.1.s390x",
"product_id": "go1.25-libstd-1.25.8-1.1.s390x"
}
},
{
"category": "product_version",
"name": "go1.25-race-1.25.8-1.1.s390x",
"product": {
"name": "go1.25-race-1.25.8-1.1.s390x",
"product_id": "go1.25-race-1.25.8-1.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "go1.25-1.25.8-1.1.x86_64",
"product": {
"name": "go1.25-1.25.8-1.1.x86_64",
"product_id": "go1.25-1.25.8-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "go1.25-doc-1.25.8-1.1.x86_64",
"product": {
"name": "go1.25-doc-1.25.8-1.1.x86_64",
"product_id": "go1.25-doc-1.25.8-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "go1.25-libstd-1.25.8-1.1.x86_64",
"product": {
"name": "go1.25-libstd-1.25.8-1.1.x86_64",
"product_id": "go1.25-libstd-1.25.8-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "go1.25-race-1.25.8-1.1.x86_64",
"product": {
"name": "go1.25-race-1.25.8-1.1.x86_64",
"product_id": "go1.25-race-1.25.8-1.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-1.25.8-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:go1.25-1.25.8-1.1.aarch64"
},
"product_reference": "go1.25-1.25.8-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-1.25.8-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:go1.25-1.25.8-1.1.ppc64le"
},
"product_reference": "go1.25-1.25.8-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-1.25.8-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:go1.25-1.25.8-1.1.s390x"
},
"product_reference": "go1.25-1.25.8-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-1.25.8-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:go1.25-1.25.8-1.1.x86_64"
},
"product_reference": "go1.25-1.25.8-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-doc-1.25.8-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:go1.25-doc-1.25.8-1.1.aarch64"
},
"product_reference": "go1.25-doc-1.25.8-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-doc-1.25.8-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:go1.25-doc-1.25.8-1.1.ppc64le"
},
"product_reference": "go1.25-doc-1.25.8-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-doc-1.25.8-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:go1.25-doc-1.25.8-1.1.s390x"
},
"product_reference": "go1.25-doc-1.25.8-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-doc-1.25.8-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:go1.25-doc-1.25.8-1.1.x86_64"
},
"product_reference": "go1.25-doc-1.25.8-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-libstd-1.25.8-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:go1.25-libstd-1.25.8-1.1.aarch64"
},
"product_reference": "go1.25-libstd-1.25.8-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-libstd-1.25.8-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:go1.25-libstd-1.25.8-1.1.ppc64le"
},
"product_reference": "go1.25-libstd-1.25.8-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-libstd-1.25.8-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:go1.25-libstd-1.25.8-1.1.s390x"
},
"product_reference": "go1.25-libstd-1.25.8-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-libstd-1.25.8-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:go1.25-libstd-1.25.8-1.1.x86_64"
},
"product_reference": "go1.25-libstd-1.25.8-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-race-1.25.8-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:go1.25-race-1.25.8-1.1.aarch64"
},
"product_reference": "go1.25-race-1.25.8-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-race-1.25.8-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:go1.25-race-1.25.8-1.1.ppc64le"
},
"product_reference": "go1.25-race-1.25.8-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-race-1.25.8-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:go1.25-race-1.25.8-1.1.s390x"
},
"product_reference": "go1.25-race-1.25.8-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-race-1.25.8-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:go1.25-race-1.25.8-1.1.x86_64"
},
"product_reference": "go1.25-race-1.25.8-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-25679",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-25679"
}
],
"notes": [
{
"category": "general",
"text": "url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:go1.25-1.25.8-1.1.aarch64",
"openSUSE Tumbleweed:go1.25-1.25.8-1.1.ppc64le",
"openSUSE Tumbleweed:go1.25-1.25.8-1.1.s390x",
"openSUSE Tumbleweed:go1.25-1.25.8-1.1.x86_64",
"openSUSE Tumbleweed:go1.25-doc-1.25.8-1.1.aarch64",
"openSUSE Tumbleweed:go1.25-doc-1.25.8-1.1.ppc64le",
"openSUSE Tumbleweed:go1.25-doc-1.25.8-1.1.s390x",
"openSUSE Tumbleweed:go1.25-doc-1.25.8-1.1.x86_64",
"openSUSE Tumbleweed:go1.25-libstd-1.25.8-1.1.aarch64",
"openSUSE Tumbleweed:go1.25-libstd-1.25.8-1.1.ppc64le",
"openSUSE Tumbleweed:go1.25-libstd-1.25.8-1.1.s390x",
"openSUSE Tumbleweed:go1.25-libstd-1.25.8-1.1.x86_64",
"openSUSE Tumbleweed:go1.25-race-1.25.8-1.1.aarch64",
"openSUSE Tumbleweed:go1.25-race-1.25.8-1.1.ppc64le",
"openSUSE Tumbleweed:go1.25-race-1.25.8-1.1.s390x",
"openSUSE Tumbleweed:go1.25-race-1.25.8-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-25679",
"url": "https://www.suse.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "SUSE Bug 1259264 for CVE-2026-25679",
"url": "https://bugzilla.suse.com/1259264"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:go1.25-1.25.8-1.1.aarch64",
"openSUSE Tumbleweed:go1.25-1.25.8-1.1.ppc64le",
"openSUSE Tumbleweed:go1.25-1.25.8-1.1.s390x",
"openSUSE Tumbleweed:go1.25-1.25.8-1.1.x86_64",
"openSUSE Tumbleweed:go1.25-doc-1.25.8-1.1.aarch64",
"openSUSE Tumbleweed:go1.25-doc-1.25.8-1.1.ppc64le",
"openSUSE Tumbleweed:go1.25-doc-1.25.8-1.1.s390x",
"openSUSE Tumbleweed:go1.25-doc-1.25.8-1.1.x86_64",
"openSUSE Tumbleweed:go1.25-libstd-1.25.8-1.1.aarch64",
"openSUSE Tumbleweed:go1.25-libstd-1.25.8-1.1.ppc64le",
"openSUSE Tumbleweed:go1.25-libstd-1.25.8-1.1.s390x",
"openSUSE Tumbleweed:go1.25-libstd-1.25.8-1.1.x86_64",
"openSUSE Tumbleweed:go1.25-race-1.25.8-1.1.aarch64",
"openSUSE Tumbleweed:go1.25-race-1.25.8-1.1.ppc64le",
"openSUSE Tumbleweed:go1.25-race-1.25.8-1.1.s390x",
"openSUSE Tumbleweed:go1.25-race-1.25.8-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:go1.25-1.25.8-1.1.aarch64",
"openSUSE Tumbleweed:go1.25-1.25.8-1.1.ppc64le",
"openSUSE Tumbleweed:go1.25-1.25.8-1.1.s390x",
"openSUSE Tumbleweed:go1.25-1.25.8-1.1.x86_64",
"openSUSE Tumbleweed:go1.25-doc-1.25.8-1.1.aarch64",
"openSUSE Tumbleweed:go1.25-doc-1.25.8-1.1.ppc64le",
"openSUSE Tumbleweed:go1.25-doc-1.25.8-1.1.s390x",
"openSUSE Tumbleweed:go1.25-doc-1.25.8-1.1.x86_64",
"openSUSE Tumbleweed:go1.25-libstd-1.25.8-1.1.aarch64",
"openSUSE Tumbleweed:go1.25-libstd-1.25.8-1.1.ppc64le",
"openSUSE Tumbleweed:go1.25-libstd-1.25.8-1.1.s390x",
"openSUSE Tumbleweed:go1.25-libstd-1.25.8-1.1.x86_64",
"openSUSE Tumbleweed:go1.25-race-1.25.8-1.1.aarch64",
"openSUSE Tumbleweed:go1.25-race-1.25.8-1.1.ppc64le",
"openSUSE Tumbleweed:go1.25-race-1.25.8-1.1.s390x",
"openSUSE Tumbleweed:go1.25-race-1.25.8-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-03-08T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-25679"
},
{
"cve": "CVE-2026-27139",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-27139"
}
],
"notes": [
{
"category": "general",
"text": "On Unix platforms, when listing the contents of a directory using File.ReadDir or File.Readdir the returned FileInfo could reference a file outside of the Root in which the File was opened. The impact of this escape is limited to reading metadata provided by lstat from arbitrary locations on the filesystem without permitting reading or writing files outside the root.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:go1.25-1.25.8-1.1.aarch64",
"openSUSE Tumbleweed:go1.25-1.25.8-1.1.ppc64le",
"openSUSE Tumbleweed:go1.25-1.25.8-1.1.s390x",
"openSUSE Tumbleweed:go1.25-1.25.8-1.1.x86_64",
"openSUSE Tumbleweed:go1.25-doc-1.25.8-1.1.aarch64",
"openSUSE Tumbleweed:go1.25-doc-1.25.8-1.1.ppc64le",
"openSUSE Tumbleweed:go1.25-doc-1.25.8-1.1.s390x",
"openSUSE Tumbleweed:go1.25-doc-1.25.8-1.1.x86_64",
"openSUSE Tumbleweed:go1.25-libstd-1.25.8-1.1.aarch64",
"openSUSE Tumbleweed:go1.25-libstd-1.25.8-1.1.ppc64le",
"openSUSE Tumbleweed:go1.25-libstd-1.25.8-1.1.s390x",
"openSUSE Tumbleweed:go1.25-libstd-1.25.8-1.1.x86_64",
"openSUSE Tumbleweed:go1.25-race-1.25.8-1.1.aarch64",
"openSUSE Tumbleweed:go1.25-race-1.25.8-1.1.ppc64le",
"openSUSE Tumbleweed:go1.25-race-1.25.8-1.1.s390x",
"openSUSE Tumbleweed:go1.25-race-1.25.8-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-27139",
"url": "https://www.suse.com/security/cve/CVE-2026-27139"
},
{
"category": "external",
"summary": "SUSE Bug 1259268 for CVE-2026-27139",
"url": "https://bugzilla.suse.com/1259268"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:go1.25-1.25.8-1.1.aarch64",
"openSUSE Tumbleweed:go1.25-1.25.8-1.1.ppc64le",
"openSUSE Tumbleweed:go1.25-1.25.8-1.1.s390x",
"openSUSE Tumbleweed:go1.25-1.25.8-1.1.x86_64",
"openSUSE Tumbleweed:go1.25-doc-1.25.8-1.1.aarch64",
"openSUSE Tumbleweed:go1.25-doc-1.25.8-1.1.ppc64le",
"openSUSE Tumbleweed:go1.25-doc-1.25.8-1.1.s390x",
"openSUSE Tumbleweed:go1.25-doc-1.25.8-1.1.x86_64",
"openSUSE Tumbleweed:go1.25-libstd-1.25.8-1.1.aarch64",
"openSUSE Tumbleweed:go1.25-libstd-1.25.8-1.1.ppc64le",
"openSUSE Tumbleweed:go1.25-libstd-1.25.8-1.1.s390x",
"openSUSE Tumbleweed:go1.25-libstd-1.25.8-1.1.x86_64",
"openSUSE Tumbleweed:go1.25-race-1.25.8-1.1.aarch64",
"openSUSE Tumbleweed:go1.25-race-1.25.8-1.1.ppc64le",
"openSUSE Tumbleweed:go1.25-race-1.25.8-1.1.s390x",
"openSUSE Tumbleweed:go1.25-race-1.25.8-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:go1.25-1.25.8-1.1.aarch64",
"openSUSE Tumbleweed:go1.25-1.25.8-1.1.ppc64le",
"openSUSE Tumbleweed:go1.25-1.25.8-1.1.s390x",
"openSUSE Tumbleweed:go1.25-1.25.8-1.1.x86_64",
"openSUSE Tumbleweed:go1.25-doc-1.25.8-1.1.aarch64",
"openSUSE Tumbleweed:go1.25-doc-1.25.8-1.1.ppc64le",
"openSUSE Tumbleweed:go1.25-doc-1.25.8-1.1.s390x",
"openSUSE Tumbleweed:go1.25-doc-1.25.8-1.1.x86_64",
"openSUSE Tumbleweed:go1.25-libstd-1.25.8-1.1.aarch64",
"openSUSE Tumbleweed:go1.25-libstd-1.25.8-1.1.ppc64le",
"openSUSE Tumbleweed:go1.25-libstd-1.25.8-1.1.s390x",
"openSUSE Tumbleweed:go1.25-libstd-1.25.8-1.1.x86_64",
"openSUSE Tumbleweed:go1.25-race-1.25.8-1.1.aarch64",
"openSUSE Tumbleweed:go1.25-race-1.25.8-1.1.ppc64le",
"openSUSE Tumbleweed:go1.25-race-1.25.8-1.1.s390x",
"openSUSE Tumbleweed:go1.25-race-1.25.8-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-03-08T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-27139"
},
{
"cve": "CVE-2026-27142",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-27142"
}
],
"notes": [
{
"category": "general",
"text": "Actions which insert URLs into the content attribute of HTML meta tags are not escaped. This can allow XSS if the meta tag also has an http-equiv attribute with the value \"refresh\". A new GODEBUG setting has been added, htmlmetacontenturlescape, which can be used to disable escaping URLs in actions in the meta content attribute which follow \"url=\" by setting htmlmetacontenturlescape=0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:go1.25-1.25.8-1.1.aarch64",
"openSUSE Tumbleweed:go1.25-1.25.8-1.1.ppc64le",
"openSUSE Tumbleweed:go1.25-1.25.8-1.1.s390x",
"openSUSE Tumbleweed:go1.25-1.25.8-1.1.x86_64",
"openSUSE Tumbleweed:go1.25-doc-1.25.8-1.1.aarch64",
"openSUSE Tumbleweed:go1.25-doc-1.25.8-1.1.ppc64le",
"openSUSE Tumbleweed:go1.25-doc-1.25.8-1.1.s390x",
"openSUSE Tumbleweed:go1.25-doc-1.25.8-1.1.x86_64",
"openSUSE Tumbleweed:go1.25-libstd-1.25.8-1.1.aarch64",
"openSUSE Tumbleweed:go1.25-libstd-1.25.8-1.1.ppc64le",
"openSUSE Tumbleweed:go1.25-libstd-1.25.8-1.1.s390x",
"openSUSE Tumbleweed:go1.25-libstd-1.25.8-1.1.x86_64",
"openSUSE Tumbleweed:go1.25-race-1.25.8-1.1.aarch64",
"openSUSE Tumbleweed:go1.25-race-1.25.8-1.1.ppc64le",
"openSUSE Tumbleweed:go1.25-race-1.25.8-1.1.s390x",
"openSUSE Tumbleweed:go1.25-race-1.25.8-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-27142",
"url": "https://www.suse.com/security/cve/CVE-2026-27142"
},
{
"category": "external",
"summary": "SUSE Bug 1259265 for CVE-2026-27142",
"url": "https://bugzilla.suse.com/1259265"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:go1.25-1.25.8-1.1.aarch64",
"openSUSE Tumbleweed:go1.25-1.25.8-1.1.ppc64le",
"openSUSE Tumbleweed:go1.25-1.25.8-1.1.s390x",
"openSUSE Tumbleweed:go1.25-1.25.8-1.1.x86_64",
"openSUSE Tumbleweed:go1.25-doc-1.25.8-1.1.aarch64",
"openSUSE Tumbleweed:go1.25-doc-1.25.8-1.1.ppc64le",
"openSUSE Tumbleweed:go1.25-doc-1.25.8-1.1.s390x",
"openSUSE Tumbleweed:go1.25-doc-1.25.8-1.1.x86_64",
"openSUSE Tumbleweed:go1.25-libstd-1.25.8-1.1.aarch64",
"openSUSE Tumbleweed:go1.25-libstd-1.25.8-1.1.ppc64le",
"openSUSE Tumbleweed:go1.25-libstd-1.25.8-1.1.s390x",
"openSUSE Tumbleweed:go1.25-libstd-1.25.8-1.1.x86_64",
"openSUSE Tumbleweed:go1.25-race-1.25.8-1.1.aarch64",
"openSUSE Tumbleweed:go1.25-race-1.25.8-1.1.ppc64le",
"openSUSE Tumbleweed:go1.25-race-1.25.8-1.1.s390x",
"openSUSE Tumbleweed:go1.25-race-1.25.8-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:go1.25-1.25.8-1.1.aarch64",
"openSUSE Tumbleweed:go1.25-1.25.8-1.1.ppc64le",
"openSUSE Tumbleweed:go1.25-1.25.8-1.1.s390x",
"openSUSE Tumbleweed:go1.25-1.25.8-1.1.x86_64",
"openSUSE Tumbleweed:go1.25-doc-1.25.8-1.1.aarch64",
"openSUSE Tumbleweed:go1.25-doc-1.25.8-1.1.ppc64le",
"openSUSE Tumbleweed:go1.25-doc-1.25.8-1.1.s390x",
"openSUSE Tumbleweed:go1.25-doc-1.25.8-1.1.x86_64",
"openSUSE Tumbleweed:go1.25-libstd-1.25.8-1.1.aarch64",
"openSUSE Tumbleweed:go1.25-libstd-1.25.8-1.1.ppc64le",
"openSUSE Tumbleweed:go1.25-libstd-1.25.8-1.1.s390x",
"openSUSE Tumbleweed:go1.25-libstd-1.25.8-1.1.x86_64",
"openSUSE Tumbleweed:go1.25-race-1.25.8-1.1.aarch64",
"openSUSE Tumbleweed:go1.25-race-1.25.8-1.1.ppc64le",
"openSUSE Tumbleweed:go1.25-race-1.25.8-1.1.s390x",
"openSUSE Tumbleweed:go1.25-race-1.25.8-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-03-08T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-27142"
}
]
}
OPENSUSE-SU-2026:20342-1
Vulnerability from csaf_opensuse - Published: 2026-03-11 09:09 - Updated: 2026-03-11 09:09| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:go1.26-libstd-1.26.1-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:go1.26-libstd-1.26.1-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:go1.26-libstd-1.26.1-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:go1.26-libstd-1.26.1-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:go1.26-libstd-1.26.1-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:go1.26-libstd-1.26.1-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:go1.26-libstd-1.26.1-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:go1.26-libstd-1.26.1-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:go1.26-libstd-1.26.1-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:go1.26-libstd-1.26.1-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.x86_64 | — |
Vendor Fix
|
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for go1.26",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for go1.26 fixes the following issues:\n\nChanges in go1.26:\n\ngo1.26.1 (released 2026-03-05) includes security fixes to the\ncrypto/x509, html/template, net/url, and os packages, as well as\nbug fixes to the go command, the go fix command, the compiler,\nand the os and reflect packages. ( boo#1255111)\n\n CVE-2026-25679 CVE-2026-27142 CVE-2026-27137 CVE-2026-27138 CVE-2026-27139\n\n * go#77970 go#77578 boo#1259264 security: fix CVE-2026-25679 net/url: reject IPv6 literal not at start of host\n * go#77972 go#77954 boo#1259265 security: fix CVE-2026-27142 html/template: URLs in meta content attribute actions are not escaped\n * go#77973 go#77952 boo#1259266 security: fix CVE-2026-27137 crypto/x509: incorrect enforcement of email constraints\n * go#77974 go#77953 boo#1259267 security: fix CVE-2026-27138 crypto/x509: panic in name constraint checking for malformed certificates\n * go#77834 go#77827 boo#1259268 security: fix CVE-2026-27139 os: FileInfo can escape from a Root\n\n * go#77252 cmd/compile: miscompile of global array initialization\n * go#77407 os: Go 1.25.x regression on RemoveAll for windows\n * go#77474 cmd/go: CGO compilation fails after upgrading from Go 1.25.5 to 1.25.6 due to --define-variable flag in pkg-config\n * go#77529 cmd/fix, x/tools/go/analysis/passes/modernize: stringscut: OOB panic in indexArgValid analyzing \"buf.Bytes()\" call\n * go#77532 net/smtp: expiry date of localhostCert for testing is too short\n * go#77536 cmd/compile: internal compiler error: \u0027main.func1\u0027: not lowered: v15, Load STRUCT PTR SSA\n * go#77618 strings: HasSuffix doesn\u0027t work correctly for multibyte runes in go 1.26\n * go#77623 cmd/compile: internal compiler error on : \"tried to free an already free register\" with generic function and type \u003e= 192 bytes\n * go#77624 cmd/fix, x/tools/go/analysis/passes/modernize: stringsbuilder breaks code when combining two strings.Builders\n * go#77680 cmd/link: TestFlagW/-w_-linkmode=external fails on illumos\n * go#77766 cmd/fix,x/tools/go/analysis/passes/modernize: rangeint uses target platform\u0027s type in the range expression, breaking other platforms\n * go#77780 reflect: breaking change for reflect.Value.Interface behaviour\n * go#77786 cmd/compile: rewriteFixedLoad does not properly sign extend AuxInt\n * go#77803 cmd/fix,x/tools/go/analysis/passes/modernize: reflect.TypeOf(nil) transformed into reflect.TypeFor[untyped nil]()\n * go#77804 cmd/fix,x/tools/go/analysis/passes/modernize: minmax breaks select statements\n * go#77805 cmd/fix, x/tools/go/analysis/passes/modernize: waitgroup leads to a compilation error\n * go#77807 cmd/fix,x/tools/go/analysis/passes/modernize: stringsbuilder ignores variables if they are used multiple times\n * go#77849 cmd/fix,x/tools/go/analysis/passes/modernize: stringscut rewrite changes behavior\n * go#77860 cmd/go: change go mod init default go directive back to 1.N\n * go#77899 cmd/fix, x/tools/go/analysis/passes/modernize: bad rangeint rewriting\n * go#77904 x/tools/go/analysis/passes/modernize: stringsbuilder breaks code when GenDecl is a block declaration\n\ngo1.26.0 (released 2026-02-10) is a major release of Go.\ngo1.26.x minor releases will be provided through February 2027.\nhttps://github.com/golang/go/wiki/Go-Release-Cycle\ngo1.26 arrives six months after Go 1.25. Most of its changes are\nin the implementation of the toolchain, runtime, and\nlibraries. As always, the release maintains the Go 1 promise of\ncompatibility. We expect almost all Go programs to continue to\ncompile and run as before. (boo#1255111)\n\n * Language change: The built-in new function, which creates a new\n variable, now allows its operand to be an expression,\n specifying the initial value of the variable.\n * Language change: The restriction that a generic type may not\n refer to itself in its type parameter list has been lifted. It\n is now possible to specify type constraints that refer to the\n generic type being constrained.\n * go command: The venerable go fix command has been completely\n revamped and is now the home of Go\u2019s modernizers. It provides a\n dependable, push-button way to update Go code bases to the\n latest idioms and core library APIs. The initial suite of\n modernizers includes dozens of fixers to make use of modern\n features of the Go language and library, as well a source-level\n inliner that allows users to automate their own API migrations\n using //go:fix inline directives. These fixers should not\n change the behavior of your program, so if you encounter any\n issues with a fix performed by go fix, please report it.\n * go command: The rewritten go fix command builds atop the exact\n same Go analysis framework as go vet. This means the same\n analyzers that provide diagnostics in go vet can be used to\n suggest and apply fixes in go fix. The go fix command\u2019s\n historical fixers, all of which were obsolete, have been\n removed.\n * go command: Two upcoming Go blog posts will go into more detail\n on modernizers, the inliner, and how to get the most out of go\n fix.\n * go command: go mod init now defaults to a lower go version in\n new go.mod files. Running go mod init using a toolchain of\n version 1.N.X will create a go.mod file specifying the Go\n version go 1.(N-1).0. Pre-release versions of 1.N will create\n go.mod files specifying go 1.(N-2).0. For example, the Go 1.26\n release candidates will create go.mod files with go 1.24.0, and\n Go 1.26 and its minor releases will create go.mod files with go\n 1.25.0. This is intended to encourage the creation of modules\n that are compatible with currently supported versions of\n Go. For additional control over the go version in new modules,\n go mod init can be followed up with go get go@version.\n * go command: cmd/doc, and go tool doc have been deleted. go doc\n can be used as a replacement for go tool doc: it takes the same\n flags and arguments and has the same behavior.\n * pprof: The pprof tool web UI, enabled with the -http flag, now\n defaults to the flame graph view. The previous graph view is\n available in the \u201cView -\u003e Graph\u201d menu, or via /ui/graph.\n * Runtime: The new Green Tea garbage collector, previously\n available as an experiment in Go 1.25, is now enabled by\n default after incorporating feedback. This garbage collector\u2019s\n design improves the performance of marking and scanning small\n objects through better locality and CPU scalability. Benchmark\n results vary, but we expect somewhere between a 10\u201340%\n reduction in garbage collection overhead in real-world programs\n that heavily use the garbage collector. Further improvements,\n on the order of 10% in garbage collection overhead, are\n expected when running on newer amd64-based CPU platforms (Intel\n Ice Lake or AMD Zen 4 and newer), as the garbage collector now\n leverages vector instructions for scanning small objects when\n possible. The new garbage collector may be disabled by setting\n GOEXPERIMENT=nogreenteagc at build time. This opt-out setting\n is expected to be removed in Go 1.27. If you disable the new\n garbage collector for any reason related to its performance or\n behavior, please file an issue.\n * Runtime: cgo: The baseline runtime overhead of cgo calls has\n been reduced by ~30%.\n * Runtime: Heap base address randomization: On 64-bit platforms,\n the runtime now randomizes the heap base address at\n startup. This is a security enhancement that makes it harder\n for attackers to predict memory addresses and exploit\n vulnerabilities when using cgo. This feature may be disabled by\n setting GOEXPERIMENT=norandomizedheapbase64 at build time. This\n opt-out setting is expected to be removed in a future Go\n release.\n * Runtime: Experimental goroutine leak profile: A new profile\n type that reports leaked goroutines is now available as an\n experiment. The new profile type, named goroutineleak in the\n runtime/pprof package, may be enabled by setting\n GOEXPERIMENT=goroutineleakprofile at build time. Enabling the\n experiment also makes the profile available as a net/http/pprof\n endpoint, /debug/pprof/goroutineleak. A leaked goroutine is a\n goroutine blocked on some concurrency primitive (channels,\n sync.Mutex, sync.Cond, etc) that cannot possibly become\n unblocked. The runtime detects leaked goroutines using the\n garbage collector: if a goroutine G is blocked on concurrency\n primitive P, and P is unreachable from any runnable goroutine\n or any goroutine that those could unblock, then P cannot be\n unblocked, so goroutine G can never wake up. While it is\n impossible to detect permanently blocked goroutines in all\n cases, this approach detects a large class of such\n leaks. Because this technique builds on reachability, the\n runtime may fail to identify leaks caused by blocking on\n concurrency primitives reachable through global variables or\n the local variables of runnable goroutines. Special thanks to\n Vlad Saioc at Uber for contributing this work. The underlying\n theory is presented in detail in a publication by Saioc et\n al. The implementation is production-ready, and is only\n considered an experiment for the purposes of collecting\n feedback on the API, specifically the choice to make it a new\n profile. The feature is also designed to not incur any\n additional run-time overhead unless it is actively in-use. We\n encourage users to try out the new feature in the Go\n playground, in tests, in continuous integration, and in\n production. We welcome additional feedback on the proposal\n issue. We aim to enable goroutine leak profiles by default in\n Go 1.27.\n * Compiler: The compiler can now allocate the backing store for\n slices on the stack in more situations, which improves\n performance. If this change is causing trouble, the bisect tool\n can be used to find the allocation causing trouble using the\n -compile=variablemake flag. All such new stack allocations can\n also be turned off using -gcflags=all=-d=variablemakehash=n. If\n you encounter issues with this optimization, please file an\n issue.\n * Linker: On 64-bit ARM-based Windows (the windows/arm64 port),\n the linker now supports internal linking mode of cgo programs,\n which can be requested with the -ldflags=-linkmode=internal\n flag.\n * Linker: There are several minor changes to executable\n files. These changes do not affect running Go programs. They\n may affect programs that analyze Go executables, and they may\n affect people who use external linking mode with custom linker\n scripts.\n * Linker: The moduledata structure is now in its own section,\n named .go.module.\n * Linker: The moduledata cutab field, which is a slice, now has\n the correct length; previously the length was four times too\n large.\n * Linker: The pcHeader found at the start of the .gopclntab\n section no longer records the start of the text section. That\n field is now always zero.\n * Linker: That pcHeader change was made so that the .gopclntab\n section no longer contains any relocations. On platforms that\n support relro, the section has moved from the relro segment to\n the rodata segment.\n * Linker: The funcdata symbols and the findfunctab have moved\n from the .rodata section to the .gopclntab section.\n * Linker: The .gosymtab section has been removed. It was\n previously always present but empty.\n * Linker: When using internal linking, ELF sections now appear in\n the section header list sorted by address. The previous order\n was somewhat unpredictable.\n * Linker: The references to section names here use the ELF names\n as seen on Linux and other systems. The Mach-O names as seen on\n Darwin start with a double underscore and do not contain any\n dots.\n * Bootstrap: As mentioned in the Go 1.24 release notes, Go 1.26\n now requires Go 1.24.6 or later for bootstrap. We expect that\n Go 1.28 will require a minor release of Go 1.26 or later for\n bootstrap.\n * Standard Library: New crypto/hpke package: The new crypto/hpke\n package implements Hybrid Public Key Encryption (HPKE) as\n specified in RFC 9180, including support for post-quantum\n hybrid KEMs.\n * Standard Library: New experimental simd/archsimd package: Go\n 1.26 introduces a new experimental simd/archsimd package, which\n can be enabled by setting the environment variable\n GOEXPERIMENT=simd at build time. This package provides access\n to architecture-specific SIMD operations. It is currently\n available on the amd64 architecture and supports 128-bit,\n 256-bit, and 512-bit vector types, such as Int8x16 and\n Float64x8, with operations such as Int8x16.Add. The API is not\n yet considered stable. We intend to provide support for other\n architectures in future versions, but the API intentionally\n architecture-specific and thus non-portable. In addition, we\n plan to develop a high-level portable SIMD package in the\n future.\n * Standard Library: New experimental runtime/secret package: The\n new runtime/secret package is available as an experiment, which\n can be enabled by setting the environment variable\n GOEXPERIMENT=runtimesecret at build time. It provides a\n facility for securely erasing temporaries used in code that\n manipulates secret information\u2014typically cryptographic in\n nature\u2014such as registers, stack, new heap allocations. This\n package is intended to make it easier to ensure forward\n secrecy. It currently supports the amd64 and arm64\n architectures on Linux.\n * bytes: The new Buffer.Peek method returns the next n bytes from\n the buffer without advancing it.\n * crypto: The new Encapsulator and Decapsulator interfaces allow\n accepting abstract KEM encapsulation or decapsulation keys.\n * crypto/dsa: The random parameter to GenerateKey is now\n ignored. Instead, it now always uses a secure source of\n cryptographically random bytes. For deterministic testing, use\n the new testing/cryptotest.SetGlobalRandom function. The new\n GODEBUG setting cryptocustomrand=1 temporarily restores the old\n behavior.\n * crypto/ecdh: The random parameter to Curve.GenerateKey is now\n ignored. Instead, it now always uses a secure source of\n cryptographically random bytes. For deterministic testing, use\n the new testing/cryptotest.SetGlobalRandom function. The new\n GODEBUG setting cryptocustomrand=1 temporarily restores the old\n behavior. The new KeyExchanger interface, implemented by\n PrivateKey, makes it possible to accept abstract ECDH private\n keys, e.g. those implemented in hardware.\n * crypto/ecdsa: The big.Int fields of PublicKey and PrivateKey\n are now deprecated. The random parameter to GenerateKey,\n SignASN1, Sign, and PrivateKey.Sign is now ignored. Instead,\n they now always use a secure source of cryptographically random\n bytes. For deterministic testing, use the new\n testing/cryptotest.SetGlobalRandom function. The new GODEBUG\n setting cryptocustomrand=1 temporarily restores the old\n behavior.\n * crypto/ed25519: If the random parameter to GenerateKey is nil,\n GenerateKey now always uses a secure source of\n cryptographically random bytes, instead of crypto/rand.Reader\n (which could have been overridden). The new GODEBUG setting\n cryptocustomrand=1 temporarily restores the old behavior.\n * crypto/fips140: The new WithoutEnforcement and Enforced\n functions now allow running in GODEBUG=fips140=only mode while\n selectively disabling the strict FIPS 140-3 checks. Version\n returns the resolved FIPS 140-3 Go Cryptographic Module version\n when building against a frozen module with GOFIPS140.\n * crypto/mlkem: The new DecapsulationKey768.Encapsulator and\n DecapsulationKey1024.Encapsulator methods implement the new\n crypto.Decapsulator interface.\n * crypto/mlkem/mlkemtest: The new crypto/mlkem/mlkemtest package\n exposes the Encapsulate768 and Encapsulate1024 functions which\n implement derandomized ML-KEM encapsulation, for use with\n known-answer tests.\n * crypto/rand: The random parameter to Prime is now\n ignored. Instead, it now always uses a secure source of\n cryptographically random bytes. For deterministic testing, use\n the new testing/cryptotest.SetGlobalRandom function. The new\n GODEBUG setting cryptocustomrand=1 temporarily restores the old\n behavior.\n * crypto/rsa: The new EncryptOAEPWithOptions function allows\n specifying different hash functions for OAEP padding and MGF1\n mask generation.\n * crypto/rsa: The random parameter to GenerateKey,\n GenerateMultiPrimeKey, and EncryptPKCS1v15 is now\n ignored. Instead, they now always use a secure source of\n cryptographically random bytes. For deterministic testing, use\n the new testing/cryptotest.SetGlobalRandom function. The new\n GODEBUG setting cryptocustomrand=1 temporarily restores the old\n behavior.\n * crypto/rsa: If PrivateKey fields are modified after calling\n PrivateKey.Precompute, PrivateKey.Validate now fails.\n * crypto/rsa: PrivateKey.D is now checked for consistency with\n precomputed values, even if it is not used.\n * crypto/rsa: Unsafe PKCS #1 v1.5 encryption padding (implemented\n by EncryptPKCS1v15, DecryptPKCS1v15, and\n DecryptPKCS1v15SessionKey) is now deprecated.\n * crypto/subtle: The WithDataIndependentTiming function no longer\n locks the calling goroutine to the OS thread while executing\n the passed function. Additionally, any goroutines which are\n spawned during the execution of the passed function and their\n descendants now inherit the properties of\n WithDataIndependentTiming for their lifetime. This change also\n affects cgo in the following ways:\n * crypto/subtle: Any C code called via cgo from within the\n function passed to WithDataIndependentTiming, or from a\n goroutine spawned by the function passed to\n WithDataIndependentTiming and its descendants, will also have\n data independent timing enabled for the duration of the\n call. If the C code disables data independent timing, it will\n be re-enabled on return to Go.\n * crypto/subtle: If C code called via cgo, from the function\n passed to WithDataIndependentTiming or elsewhere, enables or\n disables data independent timing then calling into Go will\n preserve that state for the duration of the call.\n * crypto/tls: The hybrid SecP256r1MLKEM768 and SecP384r1MLKEM1024\n post-quantum key exchanges are now enabled by default. They can\n be disabled by setting Config.CurvePreferences or with the\n tlssecpmlkem=0 GODEBUG setting.\n * crypto/tls: The new ClientHelloInfo.HelloRetryRequest field\n indicates if the ClientHello was sent in response to a\n HelloRetryRequest message. The new\n ConnectionState.HelloRetryRequest field indicates if the server\n sent a HelloRetryRequest, or if the client received a\n HelloRetryRequest, depending on connection role.\n * crypto/tls: The QUICConn type used by QUIC implementations\n includes a new event for reporting TLS handshake errors.\n * crypto/tls: If Certificate.PrivateKey implements\n crypto.MessageSigner, its SignMessage method is used instead of\n Sign in TLS 1.2 and later.\n * crypto/tls: The following GODEBUG settings introduced in Go\n 1.22 and Go 1.23 will be removed in the next major Go\n release. Starting in Go 1.27, the new behavior will apply\n regardless of GODEBUG setting or go.mod language version.\n * crypto/tls: GODEBUG tlsunsafeekm:\n ConnectionState.ExportKeyingMaterial will require TLS 1.3 or\n Extended Master Secret.\n * crypto/tls: GODEBUG tlsrsakex: legacy RSA-only key exchanges\n without ECDH won\u2019t be enabled by default.\n * crypto/tls: GODEBUG tls10server: the default minimum TLS\n version for both clients and servers will be TLS 1.2.\n * crypto/tls: GODEBUG tls3des: the default cipher suites will not\n include 3DES.\n * crypto/tls: GODEBUG x509keypairleaf: X509KeyPair and\n LoadX509KeyPair will always populate the Certificate.Leaf\n field.\n * crypto/x509: The ExtKeyUsage and KeyUsage types now have String\n methods that return the corresponding OID names as defined in\n RFC 5280 and other registries.\n * crypto/x509: The ExtKeyUsage type now has an OID method that\n returns the corresponding OID for the EKU.\n * crypto/x509: The new OIDFromASN1OID function allows converting\n an encoding/asn1.ObjectIdentifier into an OID.\n * debug/elf: Additional R_LARCH_* constants from LoongArch ELF\n psABI v20250521 (global version v2.40) are defined for use with\n LoongArch systems.\n * errors: The new AsType function is a generic version of As. It\n is type-safe, faster, and, in most cases, easier to use.\n * fmt: For unformatted strings, fmt.Errorf(\"x\") now allocates\n less and generally matches the allocations for errors.New(\"x\").\n * go/ast: The new ParseDirective function parses directive\n comments, which are comments such as //go:generate. Source code\n tools can support their own directive comments and this new API\n should help them implement the conventional syntax.\n * go/ast: The new BasicLit.ValueEnd field records the precise end\n position of a literal so that the BasicLit.End method can now\n always return the correct answer. (Previously it was computed\n using a heuristic that was incorrect for multi-line raw string\n literals in Windows source files, due to removal of carriage\n returns.)\n * go/ast: Programs that update the ValuePos field of BasicLits\n produced by the parser may need to also update or clear the\n ValueEnd field to avoid minor differences in formatted output.\n * go/token: The new File.End convenience method returns the\n file\u2019s end position.\n * go/types: The gotypesalias GODEBUG setting introduced in Go\n 1.22 will be removed in the next major Go release. Starting in\n Go 1.27, the go/types package will always produce an Alias type\n for the representation of type aliases regardless of GODEBUG\n setting or go.mod language version.\n * image/jpeg: The JPEG encoder and decoder have been replaced\n with new, faster, more accurate implementations. Code that\n expects specific bit-for-bit outputs from the encoder or\n decoder may need to be updated.\n * io: ReadAll now allocates less intermediate memory and returns\n a minimally sized final slice. It is often about two times\n faster while typically allocating around half as much total\n memory, with more benefit for larger inputs.\n * log/slog: The NewMultiHandler function creates a MultiHandler\n that invokes all the given Handlers. Its Enabled method reports\n whether any of the handlers\u2019 Enabled methods return true. Its\n Handle, WithAttrs and WithGroup methods call the corresponding\n method on each of the enabled handlers.\n * net: The new Dialer methods DialIP, DialTCP, DialUDP, and\n DialUnix permit dialing specific network types with context\n values.\n * net/http: The new HTTP2Config.StrictMaxConcurrentRequests field\n controls whether a new connection should be opened if an\n existing HTTP/2 connection has exceeded its stream limit.\n * net/http: The new Transport.NewClientConn method returns a\n client connection to an HTTP server. Most users should continue\n to use Transport.RoundTrip to make requests, which manages a\n pool of connections. NewClientConn is useful for users who need\n to implement their own connection management.\n * net/http: Client now uses and sets cookies scoped to URLs with\n the host portion matching Request.Host when\n available. Previously, the connection address host was always\n used.\n * net/http/httptest: The HTTP client returned by Server.Client\n will now redirect requests for example.com and any subdomains\n to the server being tested.\n * net/http/httputil: The ReverseProxy.Director configuration\n field is deprecated in favor of ReverseProxy.Rewrite.\n * net/http/httputil: A malicious client can remove headers added\n by a Director function by designating those headers as\n hop-by-hop. Since there is no way to address this problem\n within the scope of the Director API, we added a new Rewrite\n hook in Go 1.20. Rewrite hooks are provided with both the\n unmodified inbound request received by the proxy and the\n outbound request which will be sent by the proxy. Since the\n Director hook is fundamentally unsafe, we are now deprecating\n it.\n * net/netip: The new Prefix.Compare method compares two prefixes.\n * net/url: Parse now rejects malformed URLs containing colons in\n the host subcomponent, such as http://::1/ or\n http://localhost:80:80/. URLs containing bracketed IPv6\n addresses, such as http://[::1]/ are still accepted. The new\n GODEBUG setting urlstrictcolons=0 restores the old behavior.\n * os: The new Process.WithHandle method provides access to an\n internal process handle on supported platforms (pidfd on Linux\n 5.4 or later, Handle on Windows).\n * os: On Windows, the OpenFile flag parameter can now contain any\n combination of Windows-specific file flags, such as\n FILE_FLAG_OVERLAPPED and FILE_FLAG_SEQUENTIAL_SCAN, for control\n of file or device caching behavior, access modes, and other\n special-purpose flags.\n * os/signal: NotifyContext now cancels the returned context with\n context.CancelCauseFunc and an error indicating which signal\n was received.\n * reflect: The new methods Type.Fields, Type.Methods, Type.Ins\n and Type.Outs return iterators for a type\u2019s fields (for a\n struct type), methods, inputs and outputs parameters (for a\n function type), respectively. Similarly, the new methods\n Value.Fields and Value.Methods return iterators over a value\u2019s\n fields or methods, respectively. Each iteration yields the type\n information (StructField or Method) of a field or method, along\n with the field or method Value.\n * runtime/metrics: Several new scheduler metrics have been added,\n including counts of goroutines in various states (waiting,\n runnable, etc.) under the /sched/goroutines prefix, the number\n of OS threads the runtime is aware of with\n /sched/threads:threads, and the total number of goroutines\n created by the program with\n /sched/goroutines-created:goroutines.\n * testing: The new methods T.ArtifactDir, B.ArtifactDir, and\n F.ArtifactDir return a directory in which to write test output\n files (artifacts).\n * testing: When the -artifacts flag is provided to go test, this\n directory will be located under the output directory (specified\n with -outputdir, or the current directory by\n default). Otherwise, artifacts are stored in a temporary\n directory which is removed after the test completes.\n * testing: The first call to ArtifactDir when -artifacts is\n provided writes the location of the directory to the test log.\n * testing: The B.Loop method no longer prevents inlining in the\n loop body, which could lead to unanticipated allocation and\n slower benchmarks. With this fix, we expect that all benchmarks\n can be converted from the old B.N style to the new B.Loop style\n with no ill effects. Within the body of a for b.Loop() { ... }\n loop, function call parameters, results, and assigned variables\n are still kept alive, preventing the compiler from optimizing\n away entire parts of the benchmark.\n * testing/cryptotest: The new SetGlobalRandom function configures\n a global, deterministic cryptographic randomness source for the\n duration of the test. It affects crypto/rand, and all implicit\n sources of cryptographic randomness in the crypto/... packages.\n * time: The asynctimerchan GODEBUG setting introduced in Go 1.23\n will be removed in the next major Go release. Starting in Go\n 1.27, the time package will always use unbuffered (synchronous)\n channels for timers regardless of GODEBUG setting or go.mod\n language version.\n * Ports: Darwin: Go 1.26 is the last release that will run on\n macOS 12 Monterey. Go 1.27 will require macOS 13 Ventura or\n later.\n * Ports: FreeBSD: The freebsd/riscv64 port (GOOS=freebsd\n GOARCH=riscv64) has been marked broken. See issue 76475 for\n details.\n * Ports: Windows: As announced in the Go 1.25 release notes, the\n broken 32-bit windows/arm port (GOOS=windows GOARCH=arm) has\n been removed.\n * Ports: PowerPC: Go 1.26 is the last release that supports the\n ELFv1 ABI on the big-endian 64-bit PowerPC port on Linux\n (GOOS=linux GOARCH=ppc64). It will switch to the ELFv2 ABI in\n Go 1.27. As the port does not currently support linking against\n other ELF objects, we expect this change to be transparent to\n users.\n * Ports: RISC-V: The linux/riscv64 port now supports the race\n detector.\n * Ports: S390X: The s390x port now supports passing function\n arguments and results using registers.\n * Ports: WebAssembly: The compiler now unconditionally makes use\n of the sign extension and non-trapping floating-point to\n integer conversion instructions. These features have been\n standardized since at least Wasm 2.0. The corresponding GOWASM\n settings, signext and satconv, are now ignored.\n * Ports: WebAssembly: For WebAssembly applications, the runtime\n now manages chunks of heap memory in much smaller increments,\n leading to significantly reduced memory usage for applications\n with heaps less than around 16 MiB in size.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Leap-16.0-371",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_20342-1.json"
},
{
"category": "self",
"summary": "SUSE Bug 1255111",
"url": "https://bugzilla.suse.com/1255111"
},
{
"category": "self",
"summary": "SUSE Bug 1259264",
"url": "https://bugzilla.suse.com/1259264"
},
{
"category": "self",
"summary": "SUSE Bug 1259265",
"url": "https://bugzilla.suse.com/1259265"
},
{
"category": "self",
"summary": "SUSE Bug 1259266",
"url": "https://bugzilla.suse.com/1259266"
},
{
"category": "self",
"summary": "SUSE Bug 1259267",
"url": "https://bugzilla.suse.com/1259267"
},
{
"category": "self",
"summary": "SUSE Bug 1259268",
"url": "https://bugzilla.suse.com/1259268"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-25679 page",
"url": "https://www.suse.com/security/cve/CVE-2026-25679/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-27137 page",
"url": "https://www.suse.com/security/cve/CVE-2026-27137/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-27138 page",
"url": "https://www.suse.com/security/cve/CVE-2026-27138/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-27139 page",
"url": "https://www.suse.com/security/cve/CVE-2026-27139/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-27142 page",
"url": "https://www.suse.com/security/cve/CVE-2026-27142/"
}
],
"title": "Security update for go1.26",
"tracking": {
"current_release_date": "2026-03-11T09:09:25Z",
"generator": {
"date": "2026-03-11T09:09:25Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2026:20342-1",
"initial_release_date": "2026-03-11T09:09:25Z",
"revision_history": [
{
"date": "2026-03-11T09:09:25Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "go1.26-1.26.1-160000.1.1.aarch64",
"product": {
"name": "go1.26-1.26.1-160000.1.1.aarch64",
"product_id": "go1.26-1.26.1-160000.1.1.aarch64"
}
},
{
"category": "product_version",
"name": "go1.26-doc-1.26.1-160000.1.1.aarch64",
"product": {
"name": "go1.26-doc-1.26.1-160000.1.1.aarch64",
"product_id": "go1.26-doc-1.26.1-160000.1.1.aarch64"
}
},
{
"category": "product_version",
"name": "go1.26-libstd-1.26.1-160000.1.1.aarch64",
"product": {
"name": "go1.26-libstd-1.26.1-160000.1.1.aarch64",
"product_id": "go1.26-libstd-1.26.1-160000.1.1.aarch64"
}
},
{
"category": "product_version",
"name": "go1.26-race-1.26.1-160000.1.1.aarch64",
"product": {
"name": "go1.26-race-1.26.1-160000.1.1.aarch64",
"product_id": "go1.26-race-1.26.1-160000.1.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "go1.26-1.26.1-160000.1.1.ppc64le",
"product": {
"name": "go1.26-1.26.1-160000.1.1.ppc64le",
"product_id": "go1.26-1.26.1-160000.1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "go1.26-doc-1.26.1-160000.1.1.ppc64le",
"product": {
"name": "go1.26-doc-1.26.1-160000.1.1.ppc64le",
"product_id": "go1.26-doc-1.26.1-160000.1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "go1.26-race-1.26.1-160000.1.1.ppc64le",
"product": {
"name": "go1.26-race-1.26.1-160000.1.1.ppc64le",
"product_id": "go1.26-race-1.26.1-160000.1.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "go1.26-1.26.1-160000.1.1.s390x",
"product": {
"name": "go1.26-1.26.1-160000.1.1.s390x",
"product_id": "go1.26-1.26.1-160000.1.1.s390x"
}
},
{
"category": "product_version",
"name": "go1.26-doc-1.26.1-160000.1.1.s390x",
"product": {
"name": "go1.26-doc-1.26.1-160000.1.1.s390x",
"product_id": "go1.26-doc-1.26.1-160000.1.1.s390x"
}
},
{
"category": "product_version",
"name": "go1.26-race-1.26.1-160000.1.1.s390x",
"product": {
"name": "go1.26-race-1.26.1-160000.1.1.s390x",
"product_id": "go1.26-race-1.26.1-160000.1.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "go1.26-1.26.1-160000.1.1.x86_64",
"product": {
"name": "go1.26-1.26.1-160000.1.1.x86_64",
"product_id": "go1.26-1.26.1-160000.1.1.x86_64"
}
},
{
"category": "product_version",
"name": "go1.26-doc-1.26.1-160000.1.1.x86_64",
"product": {
"name": "go1.26-doc-1.26.1-160000.1.1.x86_64",
"product_id": "go1.26-doc-1.26.1-160000.1.1.x86_64"
}
},
{
"category": "product_version",
"name": "go1.26-libstd-1.26.1-160000.1.1.x86_64",
"product": {
"name": "go1.26-libstd-1.26.1-160000.1.1.x86_64",
"product_id": "go1.26-libstd-1.26.1-160000.1.1.x86_64"
}
},
{
"category": "product_version",
"name": "go1.26-race-1.26.1-160000.1.1.x86_64",
"product": {
"name": "go1.26-race-1.26.1-160000.1.1.x86_64",
"product_id": "go1.26-race-1.26.1-160000.1.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Leap 16.0",
"product": {
"name": "openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0"
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-1.26.1-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.aarch64"
},
"product_reference": "go1.26-1.26.1-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-1.26.1-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.ppc64le"
},
"product_reference": "go1.26-1.26.1-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-1.26.1-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.s390x"
},
"product_reference": "go1.26-1.26.1-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-1.26.1-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.x86_64"
},
"product_reference": "go1.26-1.26.1-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-doc-1.26.1-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.aarch64"
},
"product_reference": "go1.26-doc-1.26.1-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-doc-1.26.1-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.ppc64le"
},
"product_reference": "go1.26-doc-1.26.1-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-doc-1.26.1-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.s390x"
},
"product_reference": "go1.26-doc-1.26.1-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-doc-1.26.1-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.x86_64"
},
"product_reference": "go1.26-doc-1.26.1-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-libstd-1.26.1-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:go1.26-libstd-1.26.1-160000.1.1.aarch64"
},
"product_reference": "go1.26-libstd-1.26.1-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-libstd-1.26.1-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:go1.26-libstd-1.26.1-160000.1.1.x86_64"
},
"product_reference": "go1.26-libstd-1.26.1-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-race-1.26.1-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.aarch64"
},
"product_reference": "go1.26-race-1.26.1-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-race-1.26.1-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.ppc64le"
},
"product_reference": "go1.26-race-1.26.1-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-race-1.26.1-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.s390x"
},
"product_reference": "go1.26-race-1.26.1-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-race-1.26.1-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.x86_64"
},
"product_reference": "go1.26-race-1.26.1-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-25679",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-25679"
}
],
"notes": [
{
"category": "general",
"text": "url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:go1.26-libstd-1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:go1.26-libstd-1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-25679",
"url": "https://www.suse.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "SUSE Bug 1259264 for CVE-2026-25679",
"url": "https://bugzilla.suse.com/1259264"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:go1.26-libstd-1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:go1.26-libstd-1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:go1.26-libstd-1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:go1.26-libstd-1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-03-11T09:09:25Z",
"details": "moderate"
}
],
"title": "CVE-2026-25679"
},
{
"cve": "CVE-2026-27137",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-27137"
}
],
"notes": [
{
"category": "general",
"text": "When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:go1.26-libstd-1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:go1.26-libstd-1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-27137",
"url": "https://www.suse.com/security/cve/CVE-2026-27137"
},
{
"category": "external",
"summary": "SUSE Bug 1259266 for CVE-2026-27137",
"url": "https://bugzilla.suse.com/1259266"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:go1.26-libstd-1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:go1.26-libstd-1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:go1.26-libstd-1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:go1.26-libstd-1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-03-11T09:09:25Z",
"details": "moderate"
}
],
"title": "CVE-2026-27137"
},
{
"cve": "CVE-2026-27138",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-27138"
}
],
"notes": [
{
"category": "general",
"text": "Certificate verification can panic when a certificate in the chain has an empty DNS name and another certificate in the chain has excluded name constraints. This can crash programs that are either directly verifying X.509 certificate chains, or those that use TLS.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:go1.26-libstd-1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:go1.26-libstd-1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-27138",
"url": "https://www.suse.com/security/cve/CVE-2026-27138"
},
{
"category": "external",
"summary": "SUSE Bug 1259267 for CVE-2026-27138",
"url": "https://bugzilla.suse.com/1259267"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:go1.26-libstd-1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:go1.26-libstd-1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:go1.26-libstd-1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:go1.26-libstd-1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-03-11T09:09:25Z",
"details": "important"
}
],
"title": "CVE-2026-27138"
},
{
"cve": "CVE-2026-27139",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-27139"
}
],
"notes": [
{
"category": "general",
"text": "On Unix platforms, when listing the contents of a directory using File.ReadDir or File.Readdir the returned FileInfo could reference a file outside of the Root in which the File was opened. The impact of this escape is limited to reading metadata provided by lstat from arbitrary locations on the filesystem without permitting reading or writing files outside the root.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:go1.26-libstd-1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:go1.26-libstd-1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-27139",
"url": "https://www.suse.com/security/cve/CVE-2026-27139"
},
{
"category": "external",
"summary": "SUSE Bug 1259268 for CVE-2026-27139",
"url": "https://bugzilla.suse.com/1259268"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:go1.26-libstd-1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:go1.26-libstd-1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:go1.26-libstd-1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:go1.26-libstd-1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-03-11T09:09:25Z",
"details": "moderate"
}
],
"title": "CVE-2026-27139"
},
{
"cve": "CVE-2026-27142",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-27142"
}
],
"notes": [
{
"category": "general",
"text": "Actions which insert URLs into the content attribute of HTML meta tags are not escaped. This can allow XSS if the meta tag also has an http-equiv attribute with the value \"refresh\". A new GODEBUG setting has been added, htmlmetacontenturlescape, which can be used to disable escaping URLs in actions in the meta content attribute which follow \"url=\" by setting htmlmetacontenturlescape=0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:go1.26-libstd-1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:go1.26-libstd-1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-27142",
"url": "https://www.suse.com/security/cve/CVE-2026-27142"
},
{
"category": "external",
"summary": "SUSE Bug 1259265 for CVE-2026-27142",
"url": "https://bugzilla.suse.com/1259265"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:go1.26-libstd-1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:go1.26-libstd-1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:go1.26-1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:go1.26-doc-1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:go1.26-libstd-1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:go1.26-libstd-1.26.1-160000.1.1.x86_64",
"openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.aarch64",
"openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.ppc64le",
"openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.s390x",
"openSUSE Leap 16.0:go1.26-race-1.26.1-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-03-11T09:09:25Z",
"details": "moderate"
}
],
"title": "CVE-2026-27142"
}
]
}
RHSA-2026:10065
Vulnerability from csaf_redhat - Published: 2026-04-23 06:06 - Updated: 2026-07-02 12:39A flaw was found in libxslt package. Processing web content may disclose sensitive information. This issue was addressed with improved memory handling.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64 | — |
Vendor Fix
fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64 | — | ||
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64 | — | ||
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64 | — |
A flaw was found in NGINX. When NGINX is configured to proxy to upstream Transport Layer Security (TLS) servers, An attacker with a man-in-the-middle (MITM) position on the upstream server side—along with conditions beyond the attacker's control—may be able to inject plain text data into the response from an upstream proxied server.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64 | — |
Vendor Fix
fix
Workaround
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64 | — |
Workaround
|
A flaw was found in the OpenSSH GSSAPI (Generic Security Service Application Program Interface) delta patches, as included in various Linux distributions. A remote attacker could exploit this by sending an unexpected GSSAPI message type during the key exchange process. This occurs because the `sshpkt_disconnect()` function, when called on an error, does not properly terminate the process, leading to the continued execution of the program with uninitialized connection variables. Accessing these uninitialized variables can lead to undefined behavior, potentially resulting in information disclosure or a denial of service.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64 | — |
Vendor Fix
fix
Workaround
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64 | — |
Workaround
|
A flaw was identified in the RAR5 archive decompression logic of the libarchive library, specifically within the archive_read_data() processing path. When a specially crafted RAR5 archive is processed, the decompression routine may enter a state where internal logic prevents forward progress. This condition results in an infinite loop that continuously consumes CPU resources. Because the archive passes checksum validation and appears structurally valid, affected applications cannot detect the issue before processing. This can allow attackers to cause persistent denial-of-service conditions in services that automatically process archives.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64 | — |
Vendor Fix
fix
Workaround
|
A flaw was found in libarchive. This heap out-of-bounds read vulnerability exists in the RAR archive processing logic due to improper validation of the LZSS sliding window size after transitions between compression methods. A remote attacker can exploit this by providing a specially crafted RAR archive, leading to the disclosure of sensitive heap memory information without requiring authentication or user interaction.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64 | — |
Vendor Fix
fix
Workaround
|
A flaw was found in Python. The `webbrowser.open()` API, used to launch web browsers, does not properly sanitize input. This allows a remote attacker to craft a malicious URL containing leading dashes. When such a URL is opened, certain web browsers may interpret these dashes as command-line options, which could lead to unexpected behavior, information disclosure, or potentially arbitrary code execution, impacting the integrity of the system.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64 | — |
Vendor Fix
fix
Workaround
|
A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in the zisofs block pointer allocation logic. A remote attacker can exploit this by providing a specially crafted ISO9660 image, which can lead to a heap buffer overflow. This could potentially allow for arbitrary code execution on the affected system.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64 | — |
Vendor Fix
fix
Workaround
|
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64 | — |
Vendor Fix
fix
Workaround
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64 | — |
Workaround
|
A flaw was found in Vim, an open source, command line text editor. This heap buffer overflow vulnerability exists in the tag file resolution logic when processing the 'helpfile' option. A local user could exploit this by providing a specially crafted 'helpfile' option value, leading to a heap buffer overflow. This could result in arbitrary code execution or a denial of service.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64 | — |
Vendor Fix
fix
Workaround
|
A flaw was found in nghttp2. Due to missing internal state validation, the library continues to process incoming data even after a session has been terminated. A remote attacker could exploit this by sending a specially crafted HTTP/2 frame, leading to an assertion failure and a denial of service (DoS).
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64 | — |
Vendor Fix
fix
|
A flaw was found in NGINX, specifically within the ngx_mail_auth_http_module. When this module is enabled, and CRAM-MD5 or APOP authentication is active with an authentication server that permits retries, undisclosed requests can cause NGINX worker processes to terminate. This can lead to a Denial of Service (DoS), making the affected NGINX instance unavailable to legitimate users.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64 | — |
Vendor Fix
fix
Workaround
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64 | — |
Workaround
|
A flaw was found in NGINX. A remote attacker can exploit a buffer overflow vulnerability within the ngx_http_dav_module module. This occurs when the NGINX configuration uses DAV module MOVE or COPY methods in conjunction with prefix location and alias directives. Successful exploitation may lead to the termination of the NGINX worker process, resulting in a Denial of Service (DoS), or allow for the modification of source or destination file names outside the intended document root.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64 | — |
Vendor Fix
fix
Workaround
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64 | — |
Workaround
|
A flaw was found in NGINX Open Source, specifically within the ngx_http_mp4_module. An attacker can exploit this memory corruption vulnerability by providing a specially crafted MP4 file. This can lead to an over-read or over-write of NGINX worker memory, causing the worker to terminate and resulting in a Denial of Service (DoS). This issue affects 32-bit NGINX Open Source when built with the ngx_http_mp4_module and the mp4 directive is used.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64 | — |
Vendor Fix
fix
Workaround
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64 | — |
Workaround
|
A flaw was found in Vim, an open-source command-line text editor. Specifically, an operating system (OS) command injection vulnerability exists in the `netrw` standard plugin. A remote attacker could exploit this by tricking a user into opening a specially crafted URL, such as one using the `scp://` protocol handler. Successful exploitation allows the attacker to execute arbitrary shell commands with the same privileges as the Vim process, leading to potential system compromise.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64 | — |
Vendor Fix
fix
Workaround
|
A flaw was found in Vim. This vulnerability, a heap-buffer-overflow and a segmentation fault, exists in the swap file recovery logic. A local attacker could exploit this by providing a specially crafted swap file. This could lead to a denial of service (DoS) or potentially information disclosure.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64 | — |
Vendor Fix
fix
Workaround
|
A flaw was found in NGINX's ngx_http_mp4_module. This Out-of-Bounds Read/Write vulnerability occurs due to improper handling of specially crafted MP4 files. A local authenticated attacker, by supplying a malicious MP4 file, can trigger a buffer over-read or overwrite in worker memory. This can lead to process termination, potentially causing a denial-of-service or, under certain conditions, achieving code execution.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64 | — |
Vendor Fix
fix
Workaround
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64 | — |
Workaround
|
A flaw was found in Vim. By including a newline character in a pattern passed to Vim's glob() function, an attacker may be able to execute arbitrary shell commands. This command injection vulnerability allows for arbitrary code execution, depending on the user's shell settings.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64 | — |
Vendor Fix
fix
|
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "The latest release of Red Hat Update Infrastructure. For more details, see the product documentation.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Update Infrastructure (RHUI) container images are based on the latest RHUI RPM packages and the ubi9 or ubi9-init base images.\nThis release updates to the latest version.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:10065",
"url": "https://access.redhat.com/errata/RHSA-2026:10065"
},
{
"category": "external",
"summary": "https://access.redhat.com/products/red-hat-update-infrastructure",
"url": "https://access.redhat.com/products/red-hat-update-infrastructure"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2023-40403",
"url": "https://access.redhat.com/security/cve/CVE-2023-40403"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-1642",
"url": "https://access.redhat.com/security/cve/CVE-2026-1642"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25679",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25749",
"url": "https://access.redhat.com/security/cve/CVE-2026-25749"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27135",
"url": "https://access.redhat.com/security/cve/CVE-2026-27135"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27651",
"url": "https://access.redhat.com/security/cve/CVE-2026-27651"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27654",
"url": "https://access.redhat.com/security/cve/CVE-2026-27654"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27784",
"url": "https://access.redhat.com/security/cve/CVE-2026-27784"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-28417",
"url": "https://access.redhat.com/security/cve/CVE-2026-28417"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-28421",
"url": "https://access.redhat.com/security/cve/CVE-2026-28421"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32647",
"url": "https://access.redhat.com/security/cve/CVE-2026-32647"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33412",
"url": "https://access.redhat.com/security/cve/CVE-2026-33412"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-3497",
"url": "https://access.redhat.com/security/cve/CVE-2026-3497"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4111",
"url": "https://access.redhat.com/security/cve/CVE-2026-4111"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4424",
"url": "https://access.redhat.com/security/cve/CVE-2026-4424"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4519",
"url": "https://access.redhat.com/security/cve/CVE-2026-4519"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-5121",
"url": "https://access.redhat.com/security/cve/CVE-2026-5121"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_update_infrastructure/5",
"url": "https://docs.redhat.com/en/documentation/red_hat_update_infrastructure/5"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_10065.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Update Infrastructure 5.1 security update",
"tracking": {
"current_release_date": "2026-07-02T12:39:03+00:00",
"generator": {
"date": "2026-07-02T12:39:03+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.1"
}
},
"id": "RHSA-2026:10065",
"initial_release_date": "2026-04-23T06:06:23+00:00",
"revision_history": [
{
"date": "2026-04-23T06:06:23+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-04-23T06:06:26+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-02T12:39:03+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Update Infrastructure 5",
"product": {
"name": "Red Hat Update Infrastructure 5",
"product_id": "Red Hat Update Infrastructure 5",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhui:5::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Update Infrastructure"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64",
"product": {
"name": "registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64",
"product_id": "registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cds-rhel9@sha256%3A8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930?arch=amd64\u0026repository_url=registry.redhat.io/rhui5\u0026tag=1776868774"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64",
"product": {
"name": "registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64",
"product_id": "registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64",
"product_identification_helper": {
"purl": "pkg:oci/haproxy-rhel9@sha256%3A8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709?arch=amd64\u0026repository_url=registry.redhat.io/rhui5\u0026tag=1776868744"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64",
"product": {
"name": "registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64",
"product_id": "registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64",
"product_identification_helper": {
"purl": "pkg:oci/installer-rhel9@sha256%3A8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe?arch=amd64\u0026repository_url=registry.redhat.io/rhui5\u0026tag=1776868772"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64",
"product": {
"name": "registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64",
"product_id": "registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhua-rhel9@sha256%3A7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed?arch=amd64\u0026repository_url=registry.redhat.io/rhui5\u0026tag=1776868842"
}
}
}
],
"category": "architecture",
"name": "amd64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64 as a component of Red Hat Update Infrastructure 5",
"product_id": "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64"
},
"product_reference": "registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64",
"relates_to_product_reference": "Red Hat Update Infrastructure 5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64 as a component of Red Hat Update Infrastructure 5",
"product_id": "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64"
},
"product_reference": "registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64",
"relates_to_product_reference": "Red Hat Update Infrastructure 5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64 as a component of Red Hat Update Infrastructure 5",
"product_id": "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64"
},
"product_reference": "registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64",
"relates_to_product_reference": "Red Hat Update Infrastructure 5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64 as a component of Red Hat Update Infrastructure 5",
"product_id": "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64"
},
"product_reference": "registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64",
"relates_to_product_reference": "Red Hat Update Infrastructure 5"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-40403",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"discovery_date": "2025-03-04T12:01:50.826520+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2349766"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in libxslt package. Processing web content may disclose sensitive information. This issue was addressed with improved memory handling.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libxslt: Processing web content may disclose sensitive information",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This CVE is a duplicate of CVE-2022-4909.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64"
],
"known_not_affected": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-40403"
},
{
"category": "external",
"summary": "RHBZ#2349766",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2349766"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-40403",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-40403"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-40403",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-40403"
},
{
"category": "external",
"summary": "http://seclists.org/fulldisclosure/2023/Oct/10",
"url": "http://seclists.org/fulldisclosure/2023/Oct/10"
},
{
"category": "external",
"summary": "http://seclists.org/fulldisclosure/2023/Oct/3",
"url": "http://seclists.org/fulldisclosure/2023/Oct/3"
},
{
"category": "external",
"summary": "http://seclists.org/fulldisclosure/2023/Oct/4",
"url": "http://seclists.org/fulldisclosure/2023/Oct/4"
},
{
"category": "external",
"summary": "http://seclists.org/fulldisclosure/2023/Oct/5",
"url": "http://seclists.org/fulldisclosure/2023/Oct/5"
},
{
"category": "external",
"summary": "http://seclists.org/fulldisclosure/2023/Oct/6",
"url": "http://seclists.org/fulldisclosure/2023/Oct/6"
},
{
"category": "external",
"summary": "http://seclists.org/fulldisclosure/2023/Oct/8",
"url": "http://seclists.org/fulldisclosure/2023/Oct/8"
},
{
"category": "external",
"summary": "http://seclists.org/fulldisclosure/2023/Oct/9",
"url": "http://seclists.org/fulldisclosure/2023/Oct/9"
},
{
"category": "external",
"summary": "https://bugs.chromium.org/p/chromium/issues/detail?id=1356211",
"url": "https://bugs.chromium.org/p/chromium/issues/detail?id=1356211"
},
{
"category": "external",
"summary": "https://bugzilla.gnome.org/show_bug.cgi?id=751621",
"url": "https://bugzilla.gnome.org/show_bug.cgi?id=751621"
},
{
"category": "external",
"summary": "https://gitlab.gnome.org/GNOME/libxslt/-/issues/94",
"url": "https://gitlab.gnome.org/GNOME/libxslt/-/issues/94"
},
{
"category": "external",
"summary": "https://support.apple.com/en-us/HT213927",
"url": "https://support.apple.com/en-us/HT213927"
}
],
"release_date": "2023-09-26T20:14:54.697000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T06:06:23+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10065"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libxslt: Processing web content may disclose sensitive information"
},
{
"cve": "CVE-2026-1642",
"cwe": {
"id": "CWE-349",
"name": "Acceptance of Extraneous Untrusted Data With Trusted Data"
},
"discovery_date": "2026-02-04T16:00:52.156255+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2436738"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in NGINX. When NGINX is configured to proxy to upstream Transport Layer Security (TLS) servers, An attacker with a man-in-the-middle (MITM) position on the upstream server side\u2014along with conditions beyond the attacker\u0027s control\u2014may be able to inject plain text data into the response from an upstream proxied server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64"
],
"known_not_affected": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-1642"
},
{
"category": "external",
"summary": "RHBZ#2436738",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2436738"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-1642",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-1642"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-1642",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-1642"
},
{
"category": "external",
"summary": "https://my.f5.com/manage/s/article/K000159824",
"url": "https://my.f5.com/manage/s/article/K000159824"
}
],
"release_date": "2026-02-04T15:02:06.154000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T06:06:23+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10065"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections"
},
{
"cve": "CVE-2026-3497",
"cwe": {
"id": "CWE-824",
"name": "Access of Uninitialized Pointer"
},
"discovery_date": "2026-03-12T19:01:37.007806+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2447085"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the OpenSSH GSSAPI (Generic Security Service Application Program Interface) delta patches, as included in various Linux distributions. A remote attacker could exploit this by sending an unexpected GSSAPI message type during the key exchange process. This occurs because the `sshpkt_disconnect()` function, when called on an error, does not properly terminate the process, leading to the continued execution of the program with uninitialized connection variables. Accessing these uninitialized variables can lead to undefined behavior, potentially resulting in information disclosure or a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssh: OpenSSH GSSAPI: Information disclosure or denial of service due to uninitialized variables",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "IMPORTANT: This vulnerability affects the OpenSSH GSSAPI delta as implemented in Red Hat Enterprise Linux and OpenShift Container Platform. An unauthenticated attacker could send a specially crafted GSSAPI message during key exchange, leading to the use of uninitialized variables and potentially undefined behavior. The severity of the impact is dependent on compiler hardening configurations.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64"
],
"known_not_affected": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-3497"
},
{
"category": "external",
"summary": "RHBZ#2447085",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447085"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-3497",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-3497"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-3497",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-3497"
},
{
"category": "external",
"summary": "https://ubuntu.com/security/CVE-2026-3497",
"url": "https://ubuntu.com/security/CVE-2026-3497"
},
{
"category": "external",
"summary": "https://www.openwall.com/lists/oss-security/2026/03/12/3",
"url": "https://www.openwall.com/lists/oss-security/2026/03/12/3"
}
],
"release_date": "2026-03-12T18:27:44.917000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T06:06:23+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10065"
},
{
"category": "workaround",
"details": "To mitigate this issue, disable GSSAPI key exchange in the OpenSSH server configuration. This prevents the server from processing GSSAPI messages, eliminating the vulnerability\u0027s attack surface.\n\nEdit `/etc/ssh/sshd_config` and add or modify the line:\n```\nGSSAPIKeyExchange no\n```\n\nAfter saving the changes, restart the `sshd` service for the mitigation to take effect. This action will prevent users from authenticating via GSSAPI.\n\n```\n# systemctl restart sshd\n```",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "openssh: OpenSSH GSSAPI: Information disclosure or denial of service due to uninitialized variables"
},
{
"acknowledgments": [
{
"names": [
"Elhanan Haenel"
]
}
],
"cve": "CVE-2026-4111",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-03-11T11:18:51.609000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2446453"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was identified in the RAR5 archive decompression logic of the libarchive library, specifically within the archive_read_data() processing path. When a specially crafted RAR5 archive is processed, the decompression routine may enter a state where internal logic prevents forward progress. This condition results in an infinite loop that continuously consumes CPU resources. Because the archive passes checksum validation and appears structurally valid, affected applications cannot detect the issue before processing. This can allow attackers to cause persistent denial-of-service conditions in services that automatically process archives.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libarchive: Infinite Loop Denial of Service in RAR5 Decompression via archive_read_data() in libarchive",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The Red Hat Product Security team would likely assess the severity of this vulnerability as High because it allows remote attackers to cause a persistent denial-of-service condition using a small crafted archive file. Successful exploitation requires no authentication, no special configuration, and no user interaction in environments that automatically process uploaded archives. By repeatedly submitting malicious archives, an attacker can exhaust CPU resources or worker threads in services such as file upload systems, CI/CD pipelines, mail scanners, and content indexing services that rely on libarchive for archive extraction.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4111"
},
{
"category": "external",
"summary": "RHBZ#2446453",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2446453"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4111",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4111"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4111",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4111"
},
{
"category": "external",
"summary": "https://github.com/libarchive/libarchive/pull/2877",
"url": "https://github.com/libarchive/libarchive/pull/2877"
}
],
"release_date": "2026-03-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T06:06:23+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10065"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "libarchive: Infinite Loop Denial of Service in RAR5 Decompression via archive_read_data() in libarchive"
},
{
"acknowledgments": [
{
"names": [
"Elhanan Haenel"
]
}
],
"cve": "CVE-2026-4424",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2026-03-19T12:22:21.740000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449006"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in libarchive. This heap out-of-bounds read vulnerability exists in the RAR archive processing logic due to improper validation of the LZSS sliding window size after transitions between compression methods. A remote attacker can exploit this by providing a specially crafted RAR archive, leading to the disclosure of sensitive heap memory information without requiring authentication or user interaction.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libarchive: libarchive: Information disclosure via heap out-of-bounds read in RAR archive processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "IMPORTANT: This heap out-of-bounds read vulnerability in libarchive\u0027s RAR archive processing logic can lead to information disclosure. A remote attacker can exploit this flaw by providing a specially crafted RAR archive, potentially revealing sensitive heap memory information without requiring authentication or user interaction on systems that process untrusted archives.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4424"
},
{
"category": "external",
"summary": "RHBZ#2449006",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449006"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4424",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4424"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4424",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4424"
},
{
"category": "external",
"summary": "https://github.com/libarchive/libarchive/pull/2898",
"url": "https://github.com/libarchive/libarchive/pull/2898"
}
],
"release_date": "2026-03-19T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T06:06:23+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10065"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "libarchive: libarchive: Information disclosure via heap out-of-bounds read in RAR archive processing"
},
{
"cve": "CVE-2026-4519",
"cwe": {
"id": "CWE-88",
"name": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)"
},
"discovery_date": "2026-03-20T16:02:13.494105+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449649"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Python. The `webbrowser.open()` API, used to launch web browsers, does not properly sanitize input. This allows a remote attacker to craft a malicious URL containing leading dashes. When such a URL is opened, certain web browsers may interpret these dashes as command-line options, which could lead to unexpected behavior, information disclosure, or potentially arbitrary code execution, impacting the integrity of the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: Python: Command-line option injection in webbrowser.open() via crafted URLs",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4519"
},
{
"category": "external",
"summary": "RHBZ#2449649",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449649"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4519",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4519"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4519",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4519"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/issues/143930",
"url": "https://github.com/python/cpython/issues/143930"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/pull/143931",
"url": "https://github.com/python/cpython/pull/143931"
},
{
"category": "external",
"summary": "https://mail.python.org/archives/list/security-announce@python.org/thread/AY5NDSS433JK56Q7Q5IS7B37QFZVVOUS/",
"url": "https://mail.python.org/archives/list/security-announce@python.org/thread/AY5NDSS433JK56Q7Q5IS7B37QFZVVOUS/"
}
],
"release_date": "2026-03-20T15:08:32.576000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T06:06:23+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10065"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "python: Python: Command-line option injection in webbrowser.open() via crafted URLs"
},
{
"acknowledgments": [
{
"names": [
"Elhanan Haenel"
]
}
],
"cve": "CVE-2026-5121",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2026-03-30T07:40:25.358335+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452945"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in the zisofs block pointer allocation logic. A remote attacker can exploit this by providing a specially crafted ISO9660 image, which can lead to a heap buffer overflow. This could potentially allow for arbitrary code execution on the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libarchive: libarchive: Arbitrary code execution via integer overflow in ISO9660 image processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: An integer overflow flaw in `libarchive` on 32-bit systems can lead to a heap buffer overflow. This vulnerability occurs when processing a specially crafted ISO9660 image, allowing an attacker to potentially execute arbitrary code. Red Hat Enterprise Linux 64-bit systems are not affected by this flaw.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-5121"
},
{
"category": "external",
"summary": "RHBZ#2452945",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452945"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-5121",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-5121"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-5121",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5121"
},
{
"category": "external",
"summary": "https://github.com/advisories/GHSA-2vwv-vqpv-v8vc",
"url": "https://github.com/advisories/GHSA-2vwv-vqpv-v8vc"
},
{
"category": "external",
"summary": "https://github.com/libarchive/libarchive/pull/2934",
"url": "https://github.com/libarchive/libarchive/pull/2934"
}
],
"release_date": "2026-03-30T07:44:15.222000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T06:06:23+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10065"
},
{
"category": "workaround",
"details": "To mitigate this issue, avoid processing untrusted ISO9660 images with applications that utilize `libarchive`. Users should only extract or read content from ISO images obtained from trusted sources.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libarchive: libarchive: Arbitrary code execution via integer overflow in ISO9660 image processing"
},
{
"cve": "CVE-2026-25679",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-03-06T22:02:11.567841+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445356"
}
],
"notes": [
{
"category": "description",
"text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: Incorrect parsing of IPv6 host literals in net/url",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64"
],
"known_not_affected": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "RHBZ#2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://go.dev/cl/752180",
"url": "https://go.dev/cl/752180"
},
{
"category": "external",
"summary": "https://go.dev/issue/77578",
"url": "https://go.dev/issue/77578"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4601",
"url": "https://pkg.go.dev/vuln/GO-2026-4601"
}
],
"release_date": "2026-03-06T21:28:14.211000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T06:06:23+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10065"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/url: Incorrect parsing of IPv6 host literals in net/url"
},
{
"cve": "CVE-2026-25749",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2026-02-09T11:08:59.061581+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2437843"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Vim, an open source, command line text editor. This heap buffer overflow vulnerability exists in the tag file resolution logic when processing the \u0027helpfile\u0027 option. A local user could exploit this by providing a specially crafted \u0027helpfile\u0027 option value, leading to a heap buffer overflow. This could result in arbitrary code execution or a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vim: Vim: Arbitrary code execution via \u0027helpfile\u0027 option processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This MODERATE impact vulnerability in Vim\u0027s tag file resolution logic allows a local attacker to achieve a out-of-bounds write. By providing a specially crafted `helpfile` option value a local user can trigger a heap buffer overflow, as consequence lead to memory corruption presenting a data integrity impact or leading the vim process to crash resulting in availability impact. Although being non-trivial and very complex, arbitrary code execution is not discarded as worst case scenario.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25749"
},
{
"category": "external",
"summary": "RHBZ#2437843",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437843"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25749",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25749"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25749",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25749"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/commit/0714b15940b245108e6e9d7aa2260dd849a26fa9",
"url": "https://github.com/vim/vim/commit/0714b15940b245108e6e9d7aa2260dd849a26fa9"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/releases/tag/v9.1.2132",
"url": "https://github.com/vim/vim/releases/tag/v9.1.2132"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/security/advisories/GHSA-5w93-4g67-mm43",
"url": "https://github.com/vim/vim/security/advisories/GHSA-5w93-4g67-mm43"
}
],
"release_date": "2026-02-06T22:43:38.630000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T06:06:23+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10065"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "vim: Vim: Arbitrary code execution via \u0027helpfile\u0027 option processing"
},
{
"cve": "CVE-2026-27135",
"cwe": {
"id": "CWE-617",
"name": "Reachable Assertion"
},
"discovery_date": "2026-03-18T19:02:13.823002+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2448754"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in nghttp2. Due to missing internal state validation, the library continues to process incoming data even after a session has been terminated. A remote attacker could exploit this by sending a specially crafted HTTP/2 frame, leading to an assertion failure and a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nghttp2: nghttp2: Denial of Service via malformed HTTP/2 frames after session termination",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27135"
},
{
"category": "external",
"summary": "RHBZ#2448754",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448754"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27135",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27135"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27135",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27135"
},
{
"category": "external",
"summary": "https://github.com/nghttp2/nghttp2/commit/5c7df8fa815ac1004d9ecb9d1f7595c4d37f46e1",
"url": "https://github.com/nghttp2/nghttp2/commit/5c7df8fa815ac1004d9ecb9d1f7595c4d37f46e1"
},
{
"category": "external",
"summary": "https://github.com/nghttp2/nghttp2/security/advisories/GHSA-6933-cjhr-5qg6",
"url": "https://github.com/nghttp2/nghttp2/security/advisories/GHSA-6933-cjhr-5qg6"
}
],
"release_date": "2026-03-18T17:59:02.045000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T06:06:23+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10065"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "nghttp2: nghttp2: Denial of Service via malformed HTTP/2 frames after session termination"
},
{
"cve": "CVE-2026-27651",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-03-24T15:02:32.414082+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2450791"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in NGINX, specifically within the ngx_mail_auth_http_module. When this module is enabled, and CRAM-MD5 or APOP authentication is active with an authentication server that permits retries, undisclosed requests can cause NGINX worker processes to terminate. This can lead to a Denial of Service (DoS), making the affected NGINX instance unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "NGINX: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64"
],
"known_not_affected": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27651"
},
{
"category": "external",
"summary": "RHBZ#2450791",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450791"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27651",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27651"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27651",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27651"
},
{
"category": "external",
"summary": "https://my.f5.com/manage/s/article/K000160383",
"url": "https://my.f5.com/manage/s/article/K000160383"
}
],
"release_date": "2026-03-24T14:13:27.295000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T06:06:23+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10065"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "NGINX: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled"
},
{
"cve": "CVE-2026-27654",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2026-03-24T15:01:19.814138+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2450776"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in NGINX. A remote attacker can exploit a buffer overflow vulnerability within the ngx_http_dav_module module. This occurs when the NGINX configuration uses DAV module MOVE or COPY methods in conjunction with prefix location and alias directives. Successful exploitation may lead to the termination of the NGINX worker process, resulting in a Denial of Service (DoS), or allow for the modification of source or destination file names outside the intended document root.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "NGINX: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64"
],
"known_not_affected": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27654"
},
{
"category": "external",
"summary": "RHBZ#2450776",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450776"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27654",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27654"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27654",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27654"
},
{
"category": "external",
"summary": "https://my.f5.com/manage/s/article/K000160382",
"url": "https://my.f5.com/manage/s/article/K000160382"
}
],
"release_date": "2026-03-24T14:13:26.879000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T06:06:23+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10065"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "NGINX: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module"
},
{
"cve": "CVE-2026-27784",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2026-03-24T15:02:07.092253+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2450785"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in NGINX Open Source, specifically within the ngx_http_mp4_module. An attacker can exploit this memory corruption vulnerability by providing a specially crafted MP4 file. This can lead to an over-read or over-write of NGINX worker memory, causing the worker to terminate and resulting in a Denial of Service (DoS). This issue affects 32-bit NGINX Open Source when built with the ngx_http_mp4_module and the mp4 directive is used.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "NGINX: NGINX: Denial of Service due to memory corruption via crafted MP4 file",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64"
],
"known_not_affected": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27784"
},
{
"category": "external",
"summary": "RHBZ#2450785",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450785"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27784",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27784"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27784",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27784"
},
{
"category": "external",
"summary": "https://my.f5.com/manage/s/article/K000160364",
"url": "https://my.f5.com/manage/s/article/K000160364"
}
],
"release_date": "2026-03-24T14:13:25.343000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T06:06:23+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10065"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "NGINX: NGINX: Denial of Service due to memory corruption via crafted MP4 file"
},
{
"cve": "CVE-2026-28417",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"discovery_date": "2026-02-27T22:01:53.728412+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2443455"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Vim, an open-source command-line text editor. Specifically, an operating system (OS) command injection vulnerability exists in the `netrw` standard plugin. A remote attacker could exploit this by tricking a user into opening a specially crafted URL, such as one using the `scp://` protocol handler. Successful exploitation allows the attacker to execute arbitrary shell commands with the same privileges as the Vim process, leading to potential system compromise.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The risk posed by this vulnerability is limited on Red Hat products due to user and system isolation features which are enabled by default. The impacts of this flaw will be limited by the active user\u0027s permissions and access control limits. Host systems are not at risk when following Red Hat guidelines and the root user account is not actively executing Vim.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-28417"
},
{
"category": "external",
"summary": "RHBZ#2443455",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2443455"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-28417",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28417"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-28417",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-28417"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/commit/79348dbbc09332130f4c860",
"url": "https://github.com/vim/vim/commit/79348dbbc09332130f4c860"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/releases/tag/v9.2.0073",
"url": "https://github.com/vim/vim/releases/tag/v9.2.0073"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/security/advisories/GHSA-m3xh-9434-g336",
"url": "https://github.com/vim/vim/security/advisories/GHSA-m3xh-9434-g336"
}
],
"release_date": "2026-02-27T21:54:35.196000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T06:06:23+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10065"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin"
},
{
"cve": "CVE-2026-28421",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2026-02-27T23:01:44.673504+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2443474"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Vim. This vulnerability, a heap-buffer-overflow and a segmentation fault, exists in the swap file recovery logic. A local attacker could exploit this by providing a specially crafted swap file. This could lead to a denial of service (DoS) or potentially information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vim: Vim: Denial of service and information disclosure via crafted swap file",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The risk posed by this vulnerability is limited on Red Hat products due to user and system isolation features which are enabled by default. The impacts of this flaw will be limited by the active user\u0027s permissions and access control limits. Host systems are not at risk when following Red Hat guidelines and the root user account is not actively executing Vim.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-28421"
},
{
"category": "external",
"summary": "RHBZ#2443474",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2443474"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-28421",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28421"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-28421",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-28421"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/commit/65c1a143c331c886dc28",
"url": "https://github.com/vim/vim/commit/65c1a143c331c886dc28"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/releases/tag/v9.2.0077",
"url": "https://github.com/vim/vim/releases/tag/v9.2.0077"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/security/advisories/GHSA-r2gw-2x48-jj5p",
"url": "https://github.com/vim/vim/security/advisories/GHSA-r2gw-2x48-jj5p"
}
],
"release_date": "2026-02-27T22:06:34.312000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T06:06:23+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10065"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "vim: Vim: Denial of service and information disclosure via crafted swap file"
},
{
"acknowledgments": [
{
"names": [
"Pavel Kohout"
],
"organization": "Aisle Research"
}
],
"cve": "CVE-2026-32647",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2026-03-20T11:44:34.715000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449598"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in NGINX\u0027s ngx_http_mp4_module. This Out-of-Bounds Read/Write vulnerability occurs due to improper handling of specially crafted MP4 files. A local authenticated attacker, by supplying a malicious MP4 file, can trigger a buffer over-read or overwrite in worker memory. This can lead to process termination, potentially causing a denial-of-service or, under certain conditions, achieving code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This IMPORTANT vulnerability in the NGINX ngx_http_mp4_module is due to improper handling of specially crafted MP4 files. A local authenticated attacker could exploit this flaw by providing a malicious MP4 file, leading to a denial of service or potentially arbitrary code execution. Red Hat products utilizing NGINX with the ngx_http_mp4_module enabled are affected if untrusted MP4 files are processed.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64"
],
"known_not_affected": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32647"
},
{
"category": "external",
"summary": "RHBZ#2449598",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449598"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32647",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32647"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32647",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32647"
},
{
"category": "external",
"summary": "https://my.f5.com/manage/s/article/K000160366",
"url": "https://my.f5.com/manage/s/article/K000160366"
}
],
"release_date": "2026-03-24T18:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T06:06:23+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10065"
},
{
"category": "workaround",
"details": "To mitigate this issue, disable the ngx_http_mp4_module in your NGINX configuration if MP4 file processing is not required. This can be done by commenting out or removing the mp4 directive from the NGINX configuration file. After modifying the configuration, a reload or restart of the NGINX service is required for the changes to take effect.\n\nAlternatively, restrict access to the NGINX server to trusted networks and users to prevent the upload and processing of malicious MP4 files.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files"
},
{
"cve": "CVE-2026-33412",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"discovery_date": "2026-03-24T20:02:21.511965+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2450907"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Vim. By including a newline character in a pattern passed to Vim\u0027s glob() function, an attacker may be able to execute arbitrary shell commands. This command injection vulnerability allows for arbitrary code execution, depending on the user\u0027s shell settings.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vim: Vim: Arbitrary code execution via command injection in glob() function",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33412"
},
{
"category": "external",
"summary": "RHBZ#2450907",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450907"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33412",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33412"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33412",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33412"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/commit/645ed6597d1ea896c712cd7ddbb6edee79577e9a",
"url": "https://github.com/vim/vim/commit/645ed6597d1ea896c712cd7ddbb6edee79577e9a"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/releases/tag/v9.2.0202",
"url": "https://github.com/vim/vim/releases/tag/v9.2.0202"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/security/advisories/GHSA-w5jw-f54h-x46c",
"url": "https://github.com/vim/vim/security/advisories/GHSA-w5jw-f54h-x46c"
}
],
"release_date": "2026-03-24T19:43:07.219000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T06:06:23+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10065"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:8ac1507077086484155f94d2289df0f1d22bfe8f5f15589d6b354f11fe21d930_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:8fbf461b33717d3463e4f802b1a257b7e43d60c3e9568f710df83db36a04a4fe_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "vim: Vim: Arbitrary code execution via command injection in glob() function"
}
]
}
RHSA-2026:10125
Vulnerability from csaf_redhat - Published: 2026-04-23 12:15 - Updated: 2026-07-02 13:10A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64 | — |
Vendor Fix
fix
|
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64 | — |
Vendor Fix
fix
Workaround
|
A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64 | — |
Vendor Fix
fix
Workaround
|
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64 | — |
Vendor Fix
fix
Workaround
|
A flaw was found in Tekton Pipelines, specifically in the Tekton Pipelines git resolver. A tenant with permissions to create ResolutionRequests can exploit a path traversal vulnerability via the `pathInRepo` parameter. This allows the tenant to read arbitrary files from the resolver pod's filesystem, leading to information disclosure, including sensitive ServiceAccount tokens. The contents of these files are returned in a base64-encoded format.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64 | — |
Vendor Fix
fix
Workaround
|
A flaw was found in BuildKit, a toolkit for converting source code to build artifacts. An untrusted BuildKit frontend can be leveraged to craft a malicious API message, allowing files to be written outside of the designated BuildKit state directory. This vulnerability, which is a form of arbitrary file write, could enable an attacker to execute unauthorized code or escalate their privileges on the system. This issue arises when custom BuildKit frontends are used with specific configuration options.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64 | — |
Vendor Fix
fix
Workaround
|
A flaw was found in BuildKit. Insufficient validation of Git URL fragment subdirectory components may allow a remote attacker to access files outside the checked-out Git repository root. This access is limited to files on the same mounted filesystem. This vulnerability could lead to unauthorized information disclosure.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64 | — |
Vendor Fix
fix
Workaround
|
A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64 | — |
Vendor Fix
fix
Workaround
|
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "The 1.3.4 release of Red Hat Trusted Artifact Signer OpenShift Operator.\nFor more details please visit the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3",
"title": "Topic"
},
{
"category": "general",
"text": "The RHTAS Operator can be used with OpenShift Container Platform 4.16, 4.17, 4.18, 4.19, 4.20 and 4.21",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:10125",
"url": "https://access.redhat.com/errata/RHSA-2026:10125"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3",
"url": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3/html-single/release_notes/index",
"url": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3/html-single/release_notes/index"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-68121",
"url": "https://access.redhat.com/security/cve/CVE-2025-68121"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25679",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27137",
"url": "https://access.redhat.com/security/cve/CVE-2026-27137"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33211",
"url": "https://access.redhat.com/security/cve/CVE-2026-33211"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33747",
"url": "https://access.redhat.com/security/cve/CVE-2026-33747"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33748",
"url": "https://access.redhat.com/security/cve/CVE-2026-33748"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-34986",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_10125.json"
}
],
"title": "Red Hat Security Advisory: RHTAS 1.3.4 - Red Hat Trusted Artifact Signer Release",
"tracking": {
"current_release_date": "2026-07-02T13:10:29+00:00",
"generator": {
"date": "2026-07-02T13:10:29+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.1"
}
},
"id": "RHSA-2026:10125",
"initial_release_date": "2026-04-23T12:15:28+00:00",
"revision_history": [
{
"date": "2026-04-23T12:15:28+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-04-23T12:15:40+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-02T13:10:29+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Trusted Artifact Signer 1.3",
"product": {
"name": "Red Hat Trusted Artifact Signer 1.3",
"product_id": "Red Hat Trusted Artifact Signer 1.3",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Trusted Artifact Signer"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64",
"product": {
"name": "registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64",
"product_id": "registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64",
"product_identification_helper": {
"purl": "pkg:oci/client-server-rhel9@sha256%3A9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72?arch=amd64\u0026repository_url=registry.redhat.io/rhtas\u0026tag=1776339099"
}
}
}
],
"category": "architecture",
"name": "amd64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64 as a component of Red Hat Trusted Artifact Signer 1.3",
"product_id": "Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64"
},
"product_reference": "registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.3"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-68121",
"discovery_date": "2026-02-05T18:01:30.086058+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2437111"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is a moderate flaw because it only occurs under specific conditions, such as TLS session resumption with runtime changes to certificate authority settings. Exploitation is not straightforward and requires a controlled setup. The impact is limited to certificate validation within the same component and does not affect system availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-68121"
},
{
"category": "external",
"summary": "RHBZ#2437111",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437111"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-68121",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68121"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121"
},
{
"category": "external",
"summary": "https://go.dev/cl/737700",
"url": "https://go.dev/cl/737700"
},
{
"category": "external",
"summary": "https://go.dev/issue/77217",
"url": "https://go.dev/issue/77217"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk",
"url": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4337",
"url": "https://pkg.go.dev/vuln/GO-2026-4337"
}
],
"release_date": "2026-02-05T17:48:44.141000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T12:15:28+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10125"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption"
},
{
"cve": "CVE-2026-25679",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-03-06T22:02:11.567841+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445356"
}
],
"notes": [
{
"category": "description",
"text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: Incorrect parsing of IPv6 host literals in net/url",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "RHBZ#2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://go.dev/cl/752180",
"url": "https://go.dev/cl/752180"
},
{
"category": "external",
"summary": "https://go.dev/issue/77578",
"url": "https://go.dev/issue/77578"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4601",
"url": "https://pkg.go.dev/vuln/GO-2026-4601"
}
],
"release_date": "2026-03-06T21:28:14.211000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T12:15:28+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10125"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/url: Incorrect parsing of IPv6 host literals in net/url"
},
{
"cve": "CVE-2026-27137",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-03-06T22:01:38.859733+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445345"
}
],
"notes": [
{
"category": "description",
"text": "A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27137"
},
{
"category": "external",
"summary": "RHBZ#2445345",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445345"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27137",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27137"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137"
},
{
"category": "external",
"summary": "https://go.dev/cl/752182",
"url": "https://go.dev/cl/752182"
},
{
"category": "external",
"summary": "https://go.dev/issue/77952",
"url": "https://go.dev/issue/77952"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4599",
"url": "https://pkg.go.dev/vuln/GO-2026-4599"
}
],
"release_date": "2026-03-06T21:28:13.748000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T12:15:28+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10125"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T12:15:28+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10125"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-33211",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-03-24T00:02:20.093480+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2450554"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Tekton Pipelines, specifically in the Tekton Pipelines git resolver. A tenant with permissions to create ResolutionRequests can exploit a path traversal vulnerability via the `pathInRepo` parameter. This allows the tenant to read arbitrary files from the resolver pod\u0027s filesystem, leading to information disclosure, including sensitive ServiceAccount tokens. The contents of these files are returned in a base64-encoded format.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Tekton Pipelines: github.com/tektoncd/pipeline: Tekton Pipelines: Information disclosure via path traversal in git resolver",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker needs to have the permission to create ResolutionRequests (e.g., by creating TaskRuns or PipelineRuns that use the git resolver) within at least one specific namespace, limiting the exposure of this issue to authenticated users. Also, an attacker can read any file readable by the resolver pod process, including cluster secrets, allowing an escalation of privileges from namespace-scoped access to cluster-wide access. Due to these reasons, this vulnerability has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33211"
},
{
"category": "external",
"summary": "RHBZ#2450554",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450554"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33211",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33211"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33211",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33211"
},
{
"category": "external",
"summary": "https://github.com/tektoncd/pipeline/commit/10fa538f9a2b6d01c75138f1ed7ba3da0e34687c",
"url": "https://github.com/tektoncd/pipeline/commit/10fa538f9a2b6d01c75138f1ed7ba3da0e34687c"
},
{
"category": "external",
"summary": "https://github.com/tektoncd/pipeline/commit/318006c4e3a5",
"url": "https://github.com/tektoncd/pipeline/commit/318006c4e3a5"
},
{
"category": "external",
"summary": "https://github.com/tektoncd/pipeline/commit/3ca7bc6e6dd1d97f80b84f78370d91edaf023cbd",
"url": "https://github.com/tektoncd/pipeline/commit/3ca7bc6e6dd1d97f80b84f78370d91edaf023cbd"
},
{
"category": "external",
"summary": "https://github.com/tektoncd/pipeline/commit/961388fcf3374bc7656d28ab58ca84987e0a75ae",
"url": "https://github.com/tektoncd/pipeline/commit/961388fcf3374bc7656d28ab58ca84987e0a75ae"
},
{
"category": "external",
"summary": "https://github.com/tektoncd/pipeline/commit/b1fee65b88aa969069c14c120045e97c37d9ee5e",
"url": "https://github.com/tektoncd/pipeline/commit/b1fee65b88aa969069c14c120045e97c37d9ee5e"
},
{
"category": "external",
"summary": "https://github.com/tektoncd/pipeline/commit/cdb4e1e97a4f3170f9bc2cbfff83a6c8107bc3db",
"url": "https://github.com/tektoncd/pipeline/commit/cdb4e1e97a4f3170f9bc2cbfff83a6c8107bc3db"
},
{
"category": "external",
"summary": "https://github.com/tektoncd/pipeline/commit/ec7755031a183b345cf9e64bea0e0505c1b9cb78",
"url": "https://github.com/tektoncd/pipeline/commit/ec7755031a183b345cf9e64bea0e0505c1b9cb78"
},
{
"category": "external",
"summary": "https://github.com/tektoncd/pipeline/security/advisories/GHSA-j5q5-j9gm-2w5c",
"url": "https://github.com/tektoncd/pipeline/security/advisories/GHSA-j5q5-j9gm-2w5c"
}
],
"release_date": "2026-03-23T23:55:54.089000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T12:15:28+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10125"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, restrict the creation of ResolutionRequests to trusted users and service accounts. Implement strict Role-Based Access Control (RBAC) policies to limit which tenants can create TaskRuns or PipelineRuns that utilize the Tekton Pipelines git resolver. This reduces the exposure by preventing unauthorized access to the resolver pod\u0027s filesystem.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Tekton Pipelines: github.com/tektoncd/pipeline: Tekton Pipelines: Information disclosure via path traversal in git resolver"
},
{
"cve": "CVE-2026-33747",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-03-27T02:01:29.921765+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452076"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in BuildKit, a toolkit for converting source code to build artifacts. An untrusted BuildKit frontend can be leveraged to craft a malicious API message, allowing files to be written outside of the designated BuildKit state directory. This vulnerability, which is a form of arbitrary file write, could enable an attacker to execute unauthorized code or escalate their privileges on the system. This issue arises when custom BuildKit frontends are used with specific configuration options.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "BuildKit: github.com/moby/buildkit: BuildKit: Arbitrary file write and code execution via untrusted frontend",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33747"
},
{
"category": "external",
"summary": "RHBZ#2452076",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452076"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33747",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33747"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33747",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33747"
},
{
"category": "external",
"summary": "https://github.com/moby/buildkit/releases/tag/v0.28.1",
"url": "https://github.com/moby/buildkit/releases/tag/v0.28.1"
},
{
"category": "external",
"summary": "https://github.com/moby/buildkit/security/advisories/GHSA-4c29-8rgm-jvjj",
"url": "https://github.com/moby/buildkit/security/advisories/GHSA-4c29-8rgm-jvjj"
}
],
"release_date": "2026-03-27T00:49:06.165000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T12:15:28+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10125"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, avoid using untrusted BuildKit frontends. Restrict the use of custom BuildKit frontends to only those from verified and trusted sources. Do not specify untrusted frontends via `#syntax` or `--build-arg BUILDKIT_SYNTAX`.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "BuildKit: github.com/moby/buildkit: BuildKit: Arbitrary file write and code execution via untrusted frontend"
},
{
"cve": "CVE-2026-33748",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-03-27T15:02:00.107493+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452271"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in BuildKit. Insufficient validation of Git URL fragment subdirectory components may allow a remote attacker to access files outside the checked-out Git repository root. This access is limited to files on the same mounted filesystem. This vulnerability could lead to unauthorized information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/moby/buildkit: BuildKit: Unauthorized file access via Git URL fragment subdir components",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33748"
},
{
"category": "external",
"summary": "RHBZ#2452271",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452271"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33748",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33748"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33748",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33748"
},
{
"category": "external",
"summary": "https://docs.docker.com/build/concepts/context/#url-fragments",
"url": "https://docs.docker.com/build/concepts/context/#url-fragments"
},
{
"category": "external",
"summary": "https://github.com/moby/buildkit/releases/tag/v0.28.1",
"url": "https://github.com/moby/buildkit/releases/tag/v0.28.1"
},
{
"category": "external",
"summary": "https://github.com/moby/buildkit/security/advisories/GHSA-4vrq-3vrq-g6gg",
"url": "https://github.com/moby/buildkit/security/advisories/GHSA-4vrq-3vrq-g6gg"
}
],
"release_date": "2026-03-27T14:00:21.200000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T12:15:28+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10125"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "github.com/moby/buildkit: BuildKit: Unauthorized file access via Git URL fragment subdir components"
},
{
"cve": "CVE-2026-34986",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"discovery_date": "2026-04-06T17:01:34.639203+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455470"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "RHBZ#2455470",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455470"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34986",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34986"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8",
"url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants",
"url": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants"
}
],
"release_date": "2026-04-06T16:22:45.353000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T12:15:28+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10125"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object"
}
]
}
RHSA-2026:10133
Vulnerability from csaf_redhat - Published: 2026-04-23 16:57 - Updated: 2026-07-02 12:39The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-github-openprinting-ipp-usb-0:0.9.27-3.el10_0.3.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-github-openprinting-ipp-usb-debugsource-0:0.9.27-3.el10_0.3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-github-openprinting-ipp-usb-debugsource-0:0.9.27-3.el10_0.3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-github-openprinting-ipp-usb-debugsource-0:0.9.27-3.el10_0.3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:golang-github-openprinting-ipp-usb-debugsource-0:0.9.27-3.el10_0.3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:ipp-usb-0:0.9.27-3.el10_0.3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:ipp-usb-0:0.9.27-3.el10_0.3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:ipp-usb-0:0.9.27-3.el10_0.3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:ipp-usb-0:0.9.27-3.el10_0.3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:ipp-usb-debuginfo-0:0.9.27-3.el10_0.3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:ipp-usb-debuginfo-0:0.9.27-3.el10_0.3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:ipp-usb-debuginfo-0:0.9.27-3.el10_0.3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:ipp-usb-debuginfo-0:0.9.27-3.el10_0.3.x86_64 | — |
Vendor Fix
fix
Workaround
|
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for golang-github-openprinting-ipp-usb is now available for Red Hat Enterprise Linux 10.0 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "HTTP reverse proxy, backed by IPP-over-USB connection to device. It enables\n driverless support for USB devices capable of using IPP-over-USB protocol.\n\nSecurity Fix(es):\n\n* net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:10133",
"url": "https://access.redhat.com/errata/RHSA-2026:10133"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_10133.json"
}
],
"title": "Red Hat Security Advisory: golang-github-openprinting-ipp-usb security update",
"tracking": {
"current_release_date": "2026-07-02T12:39:04+00:00",
"generator": {
"date": "2026-07-02T12:39:04+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.1"
}
},
"id": "RHSA-2026:10133",
"initial_release_date": "2026-04-23T16:57:43+00:00",
"revision_history": [
{
"date": "2026-04-23T16:57:43+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-04-23T16:57:43+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-02T12:39:04+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product": {
"name": "Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux_eus:10.0"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "golang-github-openprinting-ipp-usb-0:0.9.27-3.el10_0.3.src",
"product": {
"name": "golang-github-openprinting-ipp-usb-0:0.9.27-3.el10_0.3.src",
"product_id": "golang-github-openprinting-ipp-usb-0:0.9.27-3.el10_0.3.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-github-openprinting-ipp-usb@0.9.27-3.el10_0.3?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "ipp-usb-0:0.9.27-3.el10_0.3.aarch64",
"product": {
"name": "ipp-usb-0:0.9.27-3.el10_0.3.aarch64",
"product_id": "ipp-usb-0:0.9.27-3.el10_0.3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ipp-usb@0.9.27-3.el10_0.3?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "golang-github-openprinting-ipp-usb-debugsource-0:0.9.27-3.el10_0.3.aarch64",
"product": {
"name": "golang-github-openprinting-ipp-usb-debugsource-0:0.9.27-3.el10_0.3.aarch64",
"product_id": "golang-github-openprinting-ipp-usb-debugsource-0:0.9.27-3.el10_0.3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-github-openprinting-ipp-usb-debugsource@0.9.27-3.el10_0.3?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "ipp-usb-debuginfo-0:0.9.27-3.el10_0.3.aarch64",
"product": {
"name": "ipp-usb-debuginfo-0:0.9.27-3.el10_0.3.aarch64",
"product_id": "ipp-usb-debuginfo-0:0.9.27-3.el10_0.3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ipp-usb-debuginfo@0.9.27-3.el10_0.3?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "ipp-usb-0:0.9.27-3.el10_0.3.ppc64le",
"product": {
"name": "ipp-usb-0:0.9.27-3.el10_0.3.ppc64le",
"product_id": "ipp-usb-0:0.9.27-3.el10_0.3.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ipp-usb@0.9.27-3.el10_0.3?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "golang-github-openprinting-ipp-usb-debugsource-0:0.9.27-3.el10_0.3.ppc64le",
"product": {
"name": "golang-github-openprinting-ipp-usb-debugsource-0:0.9.27-3.el10_0.3.ppc64le",
"product_id": "golang-github-openprinting-ipp-usb-debugsource-0:0.9.27-3.el10_0.3.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-github-openprinting-ipp-usb-debugsource@0.9.27-3.el10_0.3?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "ipp-usb-debuginfo-0:0.9.27-3.el10_0.3.ppc64le",
"product": {
"name": "ipp-usb-debuginfo-0:0.9.27-3.el10_0.3.ppc64le",
"product_id": "ipp-usb-debuginfo-0:0.9.27-3.el10_0.3.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ipp-usb-debuginfo@0.9.27-3.el10_0.3?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "ipp-usb-0:0.9.27-3.el10_0.3.s390x",
"product": {
"name": "ipp-usb-0:0.9.27-3.el10_0.3.s390x",
"product_id": "ipp-usb-0:0.9.27-3.el10_0.3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ipp-usb@0.9.27-3.el10_0.3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "golang-github-openprinting-ipp-usb-debugsource-0:0.9.27-3.el10_0.3.s390x",
"product": {
"name": "golang-github-openprinting-ipp-usb-debugsource-0:0.9.27-3.el10_0.3.s390x",
"product_id": "golang-github-openprinting-ipp-usb-debugsource-0:0.9.27-3.el10_0.3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-github-openprinting-ipp-usb-debugsource@0.9.27-3.el10_0.3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "ipp-usb-debuginfo-0:0.9.27-3.el10_0.3.s390x",
"product": {
"name": "ipp-usb-debuginfo-0:0.9.27-3.el10_0.3.s390x",
"product_id": "ipp-usb-debuginfo-0:0.9.27-3.el10_0.3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ipp-usb-debuginfo@0.9.27-3.el10_0.3?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "ipp-usb-0:0.9.27-3.el10_0.3.x86_64",
"product": {
"name": "ipp-usb-0:0.9.27-3.el10_0.3.x86_64",
"product_id": "ipp-usb-0:0.9.27-3.el10_0.3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ipp-usb@0.9.27-3.el10_0.3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "golang-github-openprinting-ipp-usb-debugsource-0:0.9.27-3.el10_0.3.x86_64",
"product": {
"name": "golang-github-openprinting-ipp-usb-debugsource-0:0.9.27-3.el10_0.3.x86_64",
"product_id": "golang-github-openprinting-ipp-usb-debugsource-0:0.9.27-3.el10_0.3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-github-openprinting-ipp-usb-debugsource@0.9.27-3.el10_0.3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ipp-usb-debuginfo-0:0.9.27-3.el10_0.3.x86_64",
"product": {
"name": "ipp-usb-debuginfo-0:0.9.27-3.el10_0.3.x86_64",
"product_id": "ipp-usb-debuginfo-0:0.9.27-3.el10_0.3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ipp-usb-debuginfo@0.9.27-3.el10_0.3?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-github-openprinting-ipp-usb-0:0.9.27-3.el10_0.3.src as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:golang-github-openprinting-ipp-usb-0:0.9.27-3.el10_0.3.src"
},
"product_reference": "golang-github-openprinting-ipp-usb-0:0.9.27-3.el10_0.3.src",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-github-openprinting-ipp-usb-debugsource-0:0.9.27-3.el10_0.3.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:golang-github-openprinting-ipp-usb-debugsource-0:0.9.27-3.el10_0.3.aarch64"
},
"product_reference": "golang-github-openprinting-ipp-usb-debugsource-0:0.9.27-3.el10_0.3.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-github-openprinting-ipp-usb-debugsource-0:0.9.27-3.el10_0.3.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:golang-github-openprinting-ipp-usb-debugsource-0:0.9.27-3.el10_0.3.ppc64le"
},
"product_reference": "golang-github-openprinting-ipp-usb-debugsource-0:0.9.27-3.el10_0.3.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-github-openprinting-ipp-usb-debugsource-0:0.9.27-3.el10_0.3.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:golang-github-openprinting-ipp-usb-debugsource-0:0.9.27-3.el10_0.3.s390x"
},
"product_reference": "golang-github-openprinting-ipp-usb-debugsource-0:0.9.27-3.el10_0.3.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-github-openprinting-ipp-usb-debugsource-0:0.9.27-3.el10_0.3.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:golang-github-openprinting-ipp-usb-debugsource-0:0.9.27-3.el10_0.3.x86_64"
},
"product_reference": "golang-github-openprinting-ipp-usb-debugsource-0:0.9.27-3.el10_0.3.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ipp-usb-0:0.9.27-3.el10_0.3.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:ipp-usb-0:0.9.27-3.el10_0.3.aarch64"
},
"product_reference": "ipp-usb-0:0.9.27-3.el10_0.3.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ipp-usb-0:0.9.27-3.el10_0.3.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:ipp-usb-0:0.9.27-3.el10_0.3.ppc64le"
},
"product_reference": "ipp-usb-0:0.9.27-3.el10_0.3.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ipp-usb-0:0.9.27-3.el10_0.3.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:ipp-usb-0:0.9.27-3.el10_0.3.s390x"
},
"product_reference": "ipp-usb-0:0.9.27-3.el10_0.3.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ipp-usb-0:0.9.27-3.el10_0.3.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:ipp-usb-0:0.9.27-3.el10_0.3.x86_64"
},
"product_reference": "ipp-usb-0:0.9.27-3.el10_0.3.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ipp-usb-debuginfo-0:0.9.27-3.el10_0.3.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:ipp-usb-debuginfo-0:0.9.27-3.el10_0.3.aarch64"
},
"product_reference": "ipp-usb-debuginfo-0:0.9.27-3.el10_0.3.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ipp-usb-debuginfo-0:0.9.27-3.el10_0.3.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:ipp-usb-debuginfo-0:0.9.27-3.el10_0.3.ppc64le"
},
"product_reference": "ipp-usb-debuginfo-0:0.9.27-3.el10_0.3.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ipp-usb-debuginfo-0:0.9.27-3.el10_0.3.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:ipp-usb-debuginfo-0:0.9.27-3.el10_0.3.s390x"
},
"product_reference": "ipp-usb-debuginfo-0:0.9.27-3.el10_0.3.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ipp-usb-debuginfo-0:0.9.27-3.el10_0.3.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:ipp-usb-debuginfo-0:0.9.27-3.el10_0.3.x86_64"
},
"product_reference": "ipp-usb-debuginfo-0:0.9.27-3.el10_0.3.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-25679",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-03-06T22:02:11.567841+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445356"
}
],
"notes": [
{
"category": "description",
"text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: Incorrect parsing of IPv6 host literals in net/url",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.0.Z.E2S:golang-github-openprinting-ipp-usb-0:0.9.27-3.el10_0.3.src",
"AppStream-10.0.Z.E2S:golang-github-openprinting-ipp-usb-debugsource-0:0.9.27-3.el10_0.3.aarch64",
"AppStream-10.0.Z.E2S:golang-github-openprinting-ipp-usb-debugsource-0:0.9.27-3.el10_0.3.ppc64le",
"AppStream-10.0.Z.E2S:golang-github-openprinting-ipp-usb-debugsource-0:0.9.27-3.el10_0.3.s390x",
"AppStream-10.0.Z.E2S:golang-github-openprinting-ipp-usb-debugsource-0:0.9.27-3.el10_0.3.x86_64",
"AppStream-10.0.Z.E2S:ipp-usb-0:0.9.27-3.el10_0.3.aarch64",
"AppStream-10.0.Z.E2S:ipp-usb-0:0.9.27-3.el10_0.3.ppc64le",
"AppStream-10.0.Z.E2S:ipp-usb-0:0.9.27-3.el10_0.3.s390x",
"AppStream-10.0.Z.E2S:ipp-usb-0:0.9.27-3.el10_0.3.x86_64",
"AppStream-10.0.Z.E2S:ipp-usb-debuginfo-0:0.9.27-3.el10_0.3.aarch64",
"AppStream-10.0.Z.E2S:ipp-usb-debuginfo-0:0.9.27-3.el10_0.3.ppc64le",
"AppStream-10.0.Z.E2S:ipp-usb-debuginfo-0:0.9.27-3.el10_0.3.s390x",
"AppStream-10.0.Z.E2S:ipp-usb-debuginfo-0:0.9.27-3.el10_0.3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "RHBZ#2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://go.dev/cl/752180",
"url": "https://go.dev/cl/752180"
},
{
"category": "external",
"summary": "https://go.dev/issue/77578",
"url": "https://go.dev/issue/77578"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4601",
"url": "https://pkg.go.dev/vuln/GO-2026-4601"
}
],
"release_date": "2026-03-06T21:28:14.211000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T16:57:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.0.Z.E2S:golang-github-openprinting-ipp-usb-0:0.9.27-3.el10_0.3.src",
"AppStream-10.0.Z.E2S:golang-github-openprinting-ipp-usb-debugsource-0:0.9.27-3.el10_0.3.aarch64",
"AppStream-10.0.Z.E2S:golang-github-openprinting-ipp-usb-debugsource-0:0.9.27-3.el10_0.3.ppc64le",
"AppStream-10.0.Z.E2S:golang-github-openprinting-ipp-usb-debugsource-0:0.9.27-3.el10_0.3.s390x",
"AppStream-10.0.Z.E2S:golang-github-openprinting-ipp-usb-debugsource-0:0.9.27-3.el10_0.3.x86_64",
"AppStream-10.0.Z.E2S:ipp-usb-0:0.9.27-3.el10_0.3.aarch64",
"AppStream-10.0.Z.E2S:ipp-usb-0:0.9.27-3.el10_0.3.ppc64le",
"AppStream-10.0.Z.E2S:ipp-usb-0:0.9.27-3.el10_0.3.s390x",
"AppStream-10.0.Z.E2S:ipp-usb-0:0.9.27-3.el10_0.3.x86_64",
"AppStream-10.0.Z.E2S:ipp-usb-debuginfo-0:0.9.27-3.el10_0.3.aarch64",
"AppStream-10.0.Z.E2S:ipp-usb-debuginfo-0:0.9.27-3.el10_0.3.ppc64le",
"AppStream-10.0.Z.E2S:ipp-usb-debuginfo-0:0.9.27-3.el10_0.3.s390x",
"AppStream-10.0.Z.E2S:ipp-usb-debuginfo-0:0.9.27-3.el10_0.3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10133"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-10.0.Z.E2S:golang-github-openprinting-ipp-usb-0:0.9.27-3.el10_0.3.src",
"AppStream-10.0.Z.E2S:golang-github-openprinting-ipp-usb-debugsource-0:0.9.27-3.el10_0.3.aarch64",
"AppStream-10.0.Z.E2S:golang-github-openprinting-ipp-usb-debugsource-0:0.9.27-3.el10_0.3.ppc64le",
"AppStream-10.0.Z.E2S:golang-github-openprinting-ipp-usb-debugsource-0:0.9.27-3.el10_0.3.s390x",
"AppStream-10.0.Z.E2S:golang-github-openprinting-ipp-usb-debugsource-0:0.9.27-3.el10_0.3.x86_64",
"AppStream-10.0.Z.E2S:ipp-usb-0:0.9.27-3.el10_0.3.aarch64",
"AppStream-10.0.Z.E2S:ipp-usb-0:0.9.27-3.el10_0.3.ppc64le",
"AppStream-10.0.Z.E2S:ipp-usb-0:0.9.27-3.el10_0.3.s390x",
"AppStream-10.0.Z.E2S:ipp-usb-0:0.9.27-3.el10_0.3.x86_64",
"AppStream-10.0.Z.E2S:ipp-usb-debuginfo-0:0.9.27-3.el10_0.3.aarch64",
"AppStream-10.0.Z.E2S:ipp-usb-debuginfo-0:0.9.27-3.el10_0.3.ppc64le",
"AppStream-10.0.Z.E2S:ipp-usb-debuginfo-0:0.9.27-3.el10_0.3.s390x",
"AppStream-10.0.Z.E2S:ipp-usb-debuginfo-0:0.9.27-3.el10_0.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.0.Z.E2S:golang-github-openprinting-ipp-usb-0:0.9.27-3.el10_0.3.src",
"AppStream-10.0.Z.E2S:golang-github-openprinting-ipp-usb-debugsource-0:0.9.27-3.el10_0.3.aarch64",
"AppStream-10.0.Z.E2S:golang-github-openprinting-ipp-usb-debugsource-0:0.9.27-3.el10_0.3.ppc64le",
"AppStream-10.0.Z.E2S:golang-github-openprinting-ipp-usb-debugsource-0:0.9.27-3.el10_0.3.s390x",
"AppStream-10.0.Z.E2S:golang-github-openprinting-ipp-usb-debugsource-0:0.9.27-3.el10_0.3.x86_64",
"AppStream-10.0.Z.E2S:ipp-usb-0:0.9.27-3.el10_0.3.aarch64",
"AppStream-10.0.Z.E2S:ipp-usb-0:0.9.27-3.el10_0.3.ppc64le",
"AppStream-10.0.Z.E2S:ipp-usb-0:0.9.27-3.el10_0.3.s390x",
"AppStream-10.0.Z.E2S:ipp-usb-0:0.9.27-3.el10_0.3.x86_64",
"AppStream-10.0.Z.E2S:ipp-usb-debuginfo-0:0.9.27-3.el10_0.3.aarch64",
"AppStream-10.0.Z.E2S:ipp-usb-debuginfo-0:0.9.27-3.el10_0.3.ppc64le",
"AppStream-10.0.Z.E2S:ipp-usb-debuginfo-0:0.9.27-3.el10_0.3.s390x",
"AppStream-10.0.Z.E2S:ipp-usb-debuginfo-0:0.9.27-3.el10_0.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/url: Incorrect parsing of IPv6 host literals in net/url"
}
]
}
RHSA-2026:10140
Vulnerability from csaf_redhat - Published: 2026-04-23 13:34 - Updated: 2026-07-02 12:54A flaw was found in Python. The `webbrowser.open()` API, used to launch web browsers, does not properly sanitize input. This allows a remote attacker to craft a malicious URL containing leading dashes. When such a URL is opened, certain web browsers may interpret these dashes as command-line options, which could lead to unexpected behavior, information disclosure, or potentially arbitrary code execution, impacting the integrity of the system.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:c4e99fdf145fa920e4d91f291010fe0826306112c55f8470c67b060b6235e58f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:bffbcba6080e3e3034581301575ce3211a8351ff560029426c6723ea06229430_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e288f64fd5bfeb9f94ae40c346cf6a77ae09cb639440494d36db9be9962035d6_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:080632b93a8171a88c7a17ddb8dc5f1cc7801da604aae599eac28861b5b38821_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:a6e60bde307c0d6fb5fa8c115d13169287ec851ef2f3c440da3df7a9089a8f63_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:b0f5035af6217c92086ae77c07f36742f31b2b36f5a24a70f801cd9ff181a264_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:59b3ca83b219cadb030d5b4805e505ad6bfa19e1a0f2130f646b2ba7e0b8394c_amd64 | — |
Vendor Fix
fix
Workaround
|
A flaw was found in the Python webbrowser.open() API. If a specially crafted URL containing "%action" is processed, an attacker could bypass a previous mitigation for CVE-2026-4519. This bypass allows for command injection into the underlying shell, potentially leading to arbitrary code execution.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:c4e99fdf145fa920e4d91f291010fe0826306112c55f8470c67b060b6235e58f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:bffbcba6080e3e3034581301575ce3211a8351ff560029426c6723ea06229430_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e288f64fd5bfeb9f94ae40c346cf6a77ae09cb639440494d36db9be9962035d6_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:080632b93a8171a88c7a17ddb8dc5f1cc7801da604aae599eac28861b5b38821_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:a6e60bde307c0d6fb5fa8c115d13169287ec851ef2f3c440da3df7a9089a8f63_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:b0f5035af6217c92086ae77c07f36742f31b2b36f5a24a70f801cd9ff181a264_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:59b3ca83b219cadb030d5b4805e505ad6bfa19e1a0f2130f646b2ba7e0b8394c_amd64 | — |
Vendor Fix
fix
Workaround
|
A flaw was found in Python's decompression modules, including `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile`. This vulnerability, a use-after-free, can occur if a program attempts to re-use a decompression object after a memory allocation error, especially when the system is experiencing high memory usage. Exploitation of this flaw could potentially allow an attacker to execute arbitrary code or access sensitive data. The vulnerability is only present if the program re-uses decompressor instances across multiple decompression calls even after a `MemoryError` is raised during decompression. Using the helper functions to one-shot decompress data such as `lzma.decompress()`, `bz2.decompress()`, `gzip.decompress()`, and `zlib.decompress()` are not affected as a new decompressor instance is used per call. If the decompressor instance is not re-used after an error condition, this usage is similarly not vulnerable.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:c4e99fdf145fa920e4d91f291010fe0826306112c55f8470c67b060b6235e58f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:bffbcba6080e3e3034581301575ce3211a8351ff560029426c6723ea06229430_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e288f64fd5bfeb9f94ae40c346cf6a77ae09cb639440494d36db9be9962035d6_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:080632b93a8171a88c7a17ddb8dc5f1cc7801da604aae599eac28861b5b38821_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:a6e60bde307c0d6fb5fa8c115d13169287ec851ef2f3c440da3df7a9089a8f63_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:b0f5035af6217c92086ae77c07f36742f31b2b36f5a24a70f801cd9ff181a264_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:59b3ca83b219cadb030d5b4805e505ad6bfa19e1a0f2130f646b2ba7e0b8394c_amd64 | — |
Vendor Fix
fix
Workaround
|
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:c4e99fdf145fa920e4d91f291010fe0826306112c55f8470c67b060b6235e58f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:bffbcba6080e3e3034581301575ce3211a8351ff560029426c6723ea06229430_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e288f64fd5bfeb9f94ae40c346cf6a77ae09cb639440494d36db9be9962035d6_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:080632b93a8171a88c7a17ddb8dc5f1cc7801da604aae599eac28861b5b38821_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:a6e60bde307c0d6fb5fa8c115d13169287ec851ef2f3c440da3df7a9089a8f63_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:b0f5035af6217c92086ae77c07f36742f31b2b36f5a24a70f801cd9ff181a264_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:59b3ca83b219cadb030d5b4805e505ad6bfa19e1a0f2130f646b2ba7e0b8394c_amd64 | — |
Vendor Fix
fix
Workaround
|
A flaw was found in vLLM, an inference and serving engine for large language models (LLMs). Two model implementation files hardcode `trust_remote_code=True` when loading sub-components. This bypasses the user's explicit `--trust-remote-code=False` security opt-out, allowing a remote attacker to achieve remote code execution through malicious model repositories.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:c4e99fdf145fa920e4d91f291010fe0826306112c55f8470c67b060b6235e58f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:bffbcba6080e3e3034581301575ce3211a8351ff560029426c6723ea06229430_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e288f64fd5bfeb9f94ae40c346cf6a77ae09cb639440494d36db9be9962035d6_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:080632b93a8171a88c7a17ddb8dc5f1cc7801da604aae599eac28861b5b38821_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:a6e60bde307c0d6fb5fa8c115d13169287ec851ef2f3c440da3df7a9089a8f63_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:b0f5035af6217c92086ae77c07f36742f31b2b36f5a24a70f801cd9ff181a264_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:59b3ca83b219cadb030d5b4805e505ad6bfa19e1a0f2130f646b2ba7e0b8394c_amd64 | — |
Vendor Fix
fix
Workaround
|
A missing verification step has been discovered in PyJWT. PyJWT does not validate the crit (Critical) Header Parameter defined in RFC 7515 §4.1.11. When a JWS token contains a crit array listing extensions that PyJWT does not understand, the library accepts the token instead of rejecting it. This violates the MUST requirement in the RFC.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:c4e99fdf145fa920e4d91f291010fe0826306112c55f8470c67b060b6235e58f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:bffbcba6080e3e3034581301575ce3211a8351ff560029426c6723ea06229430_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e288f64fd5bfeb9f94ae40c346cf6a77ae09cb639440494d36db9be9962035d6_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:080632b93a8171a88c7a17ddb8dc5f1cc7801da604aae599eac28861b5b38821_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:a6e60bde307c0d6fb5fa8c115d13169287ec851ef2f3c440da3df7a9089a8f63_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:b0f5035af6217c92086ae77c07f36742f31b2b36f5a24a70f801cd9ff181a264_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:59b3ca83b219cadb030d5b4805e505ad6bfa19e1a0f2130f646b2ba7e0b8394c_amd64 | — |
Vendor Fix
fix
Workaround
|
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat Enterprise Linux AI 3.3.1 is now available.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat\u00ae Enterprise Linux\u00ae AI is a foundation model platform to seamlessly develop, test,\nand run Granite family large language models (LLMs) for enterprise applications.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:10140",
"url": "https://access.redhat.com/errata/RHSA-2026:10140"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25679",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27893",
"url": "https://access.redhat.com/security/cve/CVE-2026-27893"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32597",
"url": "https://access.redhat.com/security/cve/CVE-2026-32597"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4519",
"url": "https://access.redhat.com/security/cve/CVE-2026-4519"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4786",
"url": "https://access.redhat.com/security/cve/CVE-2026-4786"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-6100",
"url": "https://access.redhat.com/security/cve/CVE-2026-6100"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://www.redhat.com/en/technologies/linux-platforms/enterprise-linux/ai",
"url": "https://www.redhat.com/en/technologies/linux-platforms/enterprise-linux/ai"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_10140.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Enterprise Linux AI 3.3.1",
"tracking": {
"current_release_date": "2026-07-02T12:54:04+00:00",
"generator": {
"date": "2026-07-02T12:54:04+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.1"
}
},
"id": "RHSA-2026:10140",
"initial_release_date": "2026-04-23T13:34:50+00:00",
"revision_history": [
{
"date": "2026-04-23T13:34:50+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-04-23T13:35:12+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-02T12:54:04+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AI 3.3",
"product": {
"name": "Red Hat Enterprise Linux AI 3.3",
"product_id": "Red Hat Enterprise Linux AI 3.3",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux_ai:3.3::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux AI"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:080632b93a8171a88c7a17ddb8dc5f1cc7801da604aae599eac28861b5b38821_amd64",
"product": {
"name": "registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:080632b93a8171a88c7a17ddb8dc5f1cc7801da604aae599eac28861b5b38821_amd64",
"product_id": "registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:080632b93a8171a88c7a17ddb8dc5f1cc7801da604aae599eac28861b5b38821_amd64",
"product_identification_helper": {
"purl": "pkg:oci/bootc-cuda-rhel9@sha256%3A080632b93a8171a88c7a17ddb8dc5f1cc7801da604aae599eac28861b5b38821?arch=amd64\u0026repository_url=registry.redhat.io/rhelai3\u0026tag=1776773390"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:c4e99fdf145fa920e4d91f291010fe0826306112c55f8470c67b060b6235e58f_amd64",
"product": {
"name": "registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:c4e99fdf145fa920e4d91f291010fe0826306112c55f8470c67b060b6235e58f_amd64",
"product_id": "registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:c4e99fdf145fa920e4d91f291010fe0826306112c55f8470c67b060b6235e58f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/bootc-aws-cuda-rhel9@sha256%3Ac4e99fdf145fa920e4d91f291010fe0826306112c55f8470c67b060b6235e58f?arch=amd64\u0026repository_url=registry.redhat.io/rhelai3\u0026tag=1776871984"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:bffbcba6080e3e3034581301575ce3211a8351ff560029426c6723ea06229430_amd64",
"product": {
"name": "registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:bffbcba6080e3e3034581301575ce3211a8351ff560029426c6723ea06229430_amd64",
"product_id": "registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:bffbcba6080e3e3034581301575ce3211a8351ff560029426c6723ea06229430_amd64",
"product_identification_helper": {
"purl": "pkg:oci/bootc-azure-cuda-rhel9@sha256%3Abffbcba6080e3e3034581301575ce3211a8351ff560029426c6723ea06229430?arch=amd64\u0026repository_url=registry.redhat.io/rhelai3\u0026tag=1776871985"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:b0f5035af6217c92086ae77c07f36742f31b2b36f5a24a70f801cd9ff181a264_amd64",
"product": {
"name": "registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:b0f5035af6217c92086ae77c07f36742f31b2b36f5a24a70f801cd9ff181a264_amd64",
"product_id": "registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:b0f5035af6217c92086ae77c07f36742f31b2b36f5a24a70f801cd9ff181a264_amd64",
"product_identification_helper": {
"purl": "pkg:oci/bootc-gcp-cuda-rhel9@sha256%3Ab0f5035af6217c92086ae77c07f36742f31b2b36f5a24a70f801cd9ff181a264?arch=amd64\u0026repository_url=registry.redhat.io/rhelai3\u0026tag=1776871987"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:59b3ca83b219cadb030d5b4805e505ad6bfa19e1a0f2130f646b2ba7e0b8394c_amd64",
"product": {
"name": "registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:59b3ca83b219cadb030d5b4805e505ad6bfa19e1a0f2130f646b2ba7e0b8394c_amd64",
"product_id": "registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:59b3ca83b219cadb030d5b4805e505ad6bfa19e1a0f2130f646b2ba7e0b8394c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/bootc-rocm-rhel9@sha256%3A59b3ca83b219cadb030d5b4805e505ad6bfa19e1a0f2130f646b2ba7e0b8394c?arch=amd64\u0026repository_url=registry.redhat.io/rhelai3\u0026tag=1776773505"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e288f64fd5bfeb9f94ae40c346cf6a77ae09cb639440494d36db9be9962035d6_amd64",
"product": {
"name": "registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e288f64fd5bfeb9f94ae40c346cf6a77ae09cb639440494d36db9be9962035d6_amd64",
"product_id": "registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e288f64fd5bfeb9f94ae40c346cf6a77ae09cb639440494d36db9be9962035d6_amd64",
"product_identification_helper": {
"purl": "pkg:oci/bootc-azure-rocm-rhel9@sha256%3Ae288f64fd5bfeb9f94ae40c346cf6a77ae09cb639440494d36db9be9962035d6?arch=amd64\u0026repository_url=registry.redhat.io/rhelai3\u0026tag=1776872005"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:a6e60bde307c0d6fb5fa8c115d13169287ec851ef2f3c440da3df7a9089a8f63_arm64",
"product": {
"name": "registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:a6e60bde307c0d6fb5fa8c115d13169287ec851ef2f3c440da3df7a9089a8f63_arm64",
"product_id": "registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:a6e60bde307c0d6fb5fa8c115d13169287ec851ef2f3c440da3df7a9089a8f63_arm64",
"product_identification_helper": {
"purl": "pkg:oci/bootc-cuda-rhel9@sha256%3Aa6e60bde307c0d6fb5fa8c115d13169287ec851ef2f3c440da3df7a9089a8f63?arch=arm64\u0026repository_url=registry.redhat.io/rhelai3\u0026tag=1776773390"
}
}
}
],
"category": "architecture",
"name": "arm64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:c4e99fdf145fa920e4d91f291010fe0826306112c55f8470c67b060b6235e58f_amd64 as a component of Red Hat Enterprise Linux AI 3.3",
"product_id": "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:c4e99fdf145fa920e4d91f291010fe0826306112c55f8470c67b060b6235e58f_amd64"
},
"product_reference": "registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:c4e99fdf145fa920e4d91f291010fe0826306112c55f8470c67b060b6235e58f_amd64",
"relates_to_product_reference": "Red Hat Enterprise Linux AI 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:bffbcba6080e3e3034581301575ce3211a8351ff560029426c6723ea06229430_amd64 as a component of Red Hat Enterprise Linux AI 3.3",
"product_id": "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:bffbcba6080e3e3034581301575ce3211a8351ff560029426c6723ea06229430_amd64"
},
"product_reference": "registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:bffbcba6080e3e3034581301575ce3211a8351ff560029426c6723ea06229430_amd64",
"relates_to_product_reference": "Red Hat Enterprise Linux AI 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e288f64fd5bfeb9f94ae40c346cf6a77ae09cb639440494d36db9be9962035d6_amd64 as a component of Red Hat Enterprise Linux AI 3.3",
"product_id": "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e288f64fd5bfeb9f94ae40c346cf6a77ae09cb639440494d36db9be9962035d6_amd64"
},
"product_reference": "registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e288f64fd5bfeb9f94ae40c346cf6a77ae09cb639440494d36db9be9962035d6_amd64",
"relates_to_product_reference": "Red Hat Enterprise Linux AI 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:080632b93a8171a88c7a17ddb8dc5f1cc7801da604aae599eac28861b5b38821_amd64 as a component of Red Hat Enterprise Linux AI 3.3",
"product_id": "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:080632b93a8171a88c7a17ddb8dc5f1cc7801da604aae599eac28861b5b38821_amd64"
},
"product_reference": "registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:080632b93a8171a88c7a17ddb8dc5f1cc7801da604aae599eac28861b5b38821_amd64",
"relates_to_product_reference": "Red Hat Enterprise Linux AI 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:a6e60bde307c0d6fb5fa8c115d13169287ec851ef2f3c440da3df7a9089a8f63_arm64 as a component of Red Hat Enterprise Linux AI 3.3",
"product_id": "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:a6e60bde307c0d6fb5fa8c115d13169287ec851ef2f3c440da3df7a9089a8f63_arm64"
},
"product_reference": "registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:a6e60bde307c0d6fb5fa8c115d13169287ec851ef2f3c440da3df7a9089a8f63_arm64",
"relates_to_product_reference": "Red Hat Enterprise Linux AI 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:b0f5035af6217c92086ae77c07f36742f31b2b36f5a24a70f801cd9ff181a264_amd64 as a component of Red Hat Enterprise Linux AI 3.3",
"product_id": "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:b0f5035af6217c92086ae77c07f36742f31b2b36f5a24a70f801cd9ff181a264_amd64"
},
"product_reference": "registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:b0f5035af6217c92086ae77c07f36742f31b2b36f5a24a70f801cd9ff181a264_amd64",
"relates_to_product_reference": "Red Hat Enterprise Linux AI 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:59b3ca83b219cadb030d5b4805e505ad6bfa19e1a0f2130f646b2ba7e0b8394c_amd64 as a component of Red Hat Enterprise Linux AI 3.3",
"product_id": "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:59b3ca83b219cadb030d5b4805e505ad6bfa19e1a0f2130f646b2ba7e0b8394c_amd64"
},
"product_reference": "registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:59b3ca83b219cadb030d5b4805e505ad6bfa19e1a0f2130f646b2ba7e0b8394c_amd64",
"relates_to_product_reference": "Red Hat Enterprise Linux AI 3.3"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-4519",
"cwe": {
"id": "CWE-88",
"name": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)"
},
"discovery_date": "2026-03-20T16:02:13.494105+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449649"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Python. The `webbrowser.open()` API, used to launch web browsers, does not properly sanitize input. This allows a remote attacker to craft a malicious URL containing leading dashes. When such a URL is opened, certain web browsers may interpret these dashes as command-line options, which could lead to unexpected behavior, information disclosure, or potentially arbitrary code execution, impacting the integrity of the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: Python: Command-line option injection in webbrowser.open() via crafted URLs",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:c4e99fdf145fa920e4d91f291010fe0826306112c55f8470c67b060b6235e58f_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:bffbcba6080e3e3034581301575ce3211a8351ff560029426c6723ea06229430_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e288f64fd5bfeb9f94ae40c346cf6a77ae09cb639440494d36db9be9962035d6_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:080632b93a8171a88c7a17ddb8dc5f1cc7801da604aae599eac28861b5b38821_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:a6e60bde307c0d6fb5fa8c115d13169287ec851ef2f3c440da3df7a9089a8f63_arm64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:b0f5035af6217c92086ae77c07f36742f31b2b36f5a24a70f801cd9ff181a264_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:59b3ca83b219cadb030d5b4805e505ad6bfa19e1a0f2130f646b2ba7e0b8394c_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4519"
},
{
"category": "external",
"summary": "RHBZ#2449649",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449649"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4519",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4519"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4519",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4519"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/issues/143930",
"url": "https://github.com/python/cpython/issues/143930"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/pull/143931",
"url": "https://github.com/python/cpython/pull/143931"
},
{
"category": "external",
"summary": "https://mail.python.org/archives/list/security-announce@python.org/thread/AY5NDSS433JK56Q7Q5IS7B37QFZVVOUS/",
"url": "https://mail.python.org/archives/list/security-announce@python.org/thread/AY5NDSS433JK56Q7Q5IS7B37QFZVVOUS/"
}
],
"release_date": "2026-03-20T15:08:32.576000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T13:34:50+00:00",
"details": "Before applying this update, ensure all previously released errata relevant to your system have been applied.",
"product_ids": [
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:c4e99fdf145fa920e4d91f291010fe0826306112c55f8470c67b060b6235e58f_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:bffbcba6080e3e3034581301575ce3211a8351ff560029426c6723ea06229430_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e288f64fd5bfeb9f94ae40c346cf6a77ae09cb639440494d36db9be9962035d6_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:080632b93a8171a88c7a17ddb8dc5f1cc7801da604aae599eac28861b5b38821_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:a6e60bde307c0d6fb5fa8c115d13169287ec851ef2f3c440da3df7a9089a8f63_arm64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:b0f5035af6217c92086ae77c07f36742f31b2b36f5a24a70f801cd9ff181a264_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:59b3ca83b219cadb030d5b4805e505ad6bfa19e1a0f2130f646b2ba7e0b8394c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10140"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:c4e99fdf145fa920e4d91f291010fe0826306112c55f8470c67b060b6235e58f_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:bffbcba6080e3e3034581301575ce3211a8351ff560029426c6723ea06229430_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e288f64fd5bfeb9f94ae40c346cf6a77ae09cb639440494d36db9be9962035d6_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:080632b93a8171a88c7a17ddb8dc5f1cc7801da604aae599eac28861b5b38821_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:a6e60bde307c0d6fb5fa8c115d13169287ec851ef2f3c440da3df7a9089a8f63_arm64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:b0f5035af6217c92086ae77c07f36742f31b2b36f5a24a70f801cd9ff181a264_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:59b3ca83b219cadb030d5b4805e505ad6bfa19e1a0f2130f646b2ba7e0b8394c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:c4e99fdf145fa920e4d91f291010fe0826306112c55f8470c67b060b6235e58f_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:bffbcba6080e3e3034581301575ce3211a8351ff560029426c6723ea06229430_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e288f64fd5bfeb9f94ae40c346cf6a77ae09cb639440494d36db9be9962035d6_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:080632b93a8171a88c7a17ddb8dc5f1cc7801da604aae599eac28861b5b38821_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:a6e60bde307c0d6fb5fa8c115d13169287ec851ef2f3c440da3df7a9089a8f63_arm64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:b0f5035af6217c92086ae77c07f36742f31b2b36f5a24a70f801cd9ff181a264_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:59b3ca83b219cadb030d5b4805e505ad6bfa19e1a0f2130f646b2ba7e0b8394c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "python: Python: Command-line option injection in webbrowser.open() via crafted URLs"
},
{
"cve": "CVE-2026-4786",
"cwe": {
"id": "CWE-88",
"name": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)"
},
"discovery_date": "2026-04-13T22:01:38.006388+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2458049"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Python webbrowser.open() API. If a specially crafted URL containing \"%action\" is processed, an attacker could bypass a previous mitigation for CVE-2026-4519. This bypass allows for command injection into the underlying shell, potentially leading to arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw in the Python `webbrowser.open()` API allows for command injection and arbitrary code execution when processing specially crafted URLs containing \"%action\". This bypasses a previous mitigation for CVE-2026-4519.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:c4e99fdf145fa920e4d91f291010fe0826306112c55f8470c67b060b6235e58f_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:bffbcba6080e3e3034581301575ce3211a8351ff560029426c6723ea06229430_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e288f64fd5bfeb9f94ae40c346cf6a77ae09cb639440494d36db9be9962035d6_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:080632b93a8171a88c7a17ddb8dc5f1cc7801da604aae599eac28861b5b38821_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:a6e60bde307c0d6fb5fa8c115d13169287ec851ef2f3c440da3df7a9089a8f63_arm64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:b0f5035af6217c92086ae77c07f36742f31b2b36f5a24a70f801cd9ff181a264_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:59b3ca83b219cadb030d5b4805e505ad6bfa19e1a0f2130f646b2ba7e0b8394c_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4786"
},
{
"category": "external",
"summary": "RHBZ#2458049",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2458049"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4786",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4786"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4786",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4786"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/issues/148169",
"url": "https://github.com/python/cpython/issues/148169"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/pull/148170",
"url": "https://github.com/python/cpython/pull/148170"
},
{
"category": "external",
"summary": "https://mail.python.org/archives/list/security-announce@python.org/thread/JQDUNJVB4AQNTJECSUKOBDU3XCJIPSE5/",
"url": "https://mail.python.org/archives/list/security-announce@python.org/thread/JQDUNJVB4AQNTJECSUKOBDU3XCJIPSE5/"
}
],
"release_date": "2026-04-13T21:52:19.036000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T13:34:50+00:00",
"details": "Before applying this update, ensure all previously released errata relevant to your system have been applied.",
"product_ids": [
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:c4e99fdf145fa920e4d91f291010fe0826306112c55f8470c67b060b6235e58f_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:bffbcba6080e3e3034581301575ce3211a8351ff560029426c6723ea06229430_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e288f64fd5bfeb9f94ae40c346cf6a77ae09cb639440494d36db9be9962035d6_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:080632b93a8171a88c7a17ddb8dc5f1cc7801da604aae599eac28861b5b38821_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:a6e60bde307c0d6fb5fa8c115d13169287ec851ef2f3c440da3df7a9089a8f63_arm64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:b0f5035af6217c92086ae77c07f36742f31b2b36f5a24a70f801cd9ff181a264_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:59b3ca83b219cadb030d5b4805e505ad6bfa19e1a0f2130f646b2ba7e0b8394c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10140"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:c4e99fdf145fa920e4d91f291010fe0826306112c55f8470c67b060b6235e58f_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:bffbcba6080e3e3034581301575ce3211a8351ff560029426c6723ea06229430_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e288f64fd5bfeb9f94ae40c346cf6a77ae09cb639440494d36db9be9962035d6_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:080632b93a8171a88c7a17ddb8dc5f1cc7801da604aae599eac28861b5b38821_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:a6e60bde307c0d6fb5fa8c115d13169287ec851ef2f3c440da3df7a9089a8f63_arm64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:b0f5035af6217c92086ae77c07f36742f31b2b36f5a24a70f801cd9ff181a264_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:59b3ca83b219cadb030d5b4805e505ad6bfa19e1a0f2130f646b2ba7e0b8394c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:c4e99fdf145fa920e4d91f291010fe0826306112c55f8470c67b060b6235e58f_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:bffbcba6080e3e3034581301575ce3211a8351ff560029426c6723ea06229430_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e288f64fd5bfeb9f94ae40c346cf6a77ae09cb639440494d36db9be9962035d6_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:080632b93a8171a88c7a17ddb8dc5f1cc7801da604aae599eac28861b5b38821_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:a6e60bde307c0d6fb5fa8c115d13169287ec851ef2f3c440da3df7a9089a8f63_arm64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:b0f5035af6217c92086ae77c07f36742f31b2b36f5a24a70f801cd9ff181a264_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:59b3ca83b219cadb030d5b4805e505ad6bfa19e1a0f2130f646b2ba7e0b8394c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API"
},
{
"cve": "CVE-2026-6100",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-04-13T18:01:31.970255+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2457932"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Python\u0027s decompression modules, including `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile`. This vulnerability, a use-after-free, can occur if a program attempts to re-use a decompression object after a memory allocation error, especially when the system is experiencing high memory usage. Exploitation of this flaw could potentially allow an attacker to execute arbitrary code or access sensitive data. The vulnerability is only present if the program re-uses decompressor instances across multiple decompression calls even after a `MemoryError` is raised during decompression. Using the helper functions to one-shot decompress data such as `lzma.decompress()`, `bz2.decompress()`, `gzip.decompress()`, and `zlib.decompress()` are not affected as a new decompressor instance is used per call. If the decompressor instance is not re-used after an error condition, this usage is similarly not vulnerable.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The severity of this flaw is somewhat mitigated on Red Hat platforms. By default processes are not executed with root user privilege and are limited in their scope which in turn limits the impact of this flaw.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:c4e99fdf145fa920e4d91f291010fe0826306112c55f8470c67b060b6235e58f_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:bffbcba6080e3e3034581301575ce3211a8351ff560029426c6723ea06229430_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e288f64fd5bfeb9f94ae40c346cf6a77ae09cb639440494d36db9be9962035d6_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:080632b93a8171a88c7a17ddb8dc5f1cc7801da604aae599eac28861b5b38821_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:a6e60bde307c0d6fb5fa8c115d13169287ec851ef2f3c440da3df7a9089a8f63_arm64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:b0f5035af6217c92086ae77c07f36742f31b2b36f5a24a70f801cd9ff181a264_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:59b3ca83b219cadb030d5b4805e505ad6bfa19e1a0f2130f646b2ba7e0b8394c_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-6100"
},
{
"category": "external",
"summary": "RHBZ#2457932",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457932"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-6100",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6100"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6100",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6100"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/commit/6a5f79c8d7bbf22b083b240910c7a8781a59437d",
"url": "https://github.com/python/cpython/commit/6a5f79c8d7bbf22b083b240910c7a8781a59437d"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/commit/8fc66aef6d7b3ae58f43f5c66f9366cc8cbbfcd2",
"url": "https://github.com/python/cpython/commit/8fc66aef6d7b3ae58f43f5c66f9366cc8cbbfcd2"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/commit/c3cf71c3366fe49acb776a639405c0eea6169c20",
"url": "https://github.com/python/cpython/commit/c3cf71c3366fe49acb776a639405c0eea6169c20"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/issues/148395",
"url": "https://github.com/python/cpython/issues/148395"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/pull/148396",
"url": "https://github.com/python/cpython/pull/148396"
},
{
"category": "external",
"summary": "https://mail.python.org/archives/list/security-announce@python.org/thread/HTWB2Z6KT5QQX4RYEZAFININDHNOSIF3/",
"url": "https://mail.python.org/archives/list/security-announce@python.org/thread/HTWB2Z6KT5QQX4RYEZAFININDHNOSIF3/"
}
],
"release_date": "2026-04-13T17:15:47.606000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T13:34:50+00:00",
"details": "Before applying this update, ensure all previously released errata relevant to your system have been applied.",
"product_ids": [
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:c4e99fdf145fa920e4d91f291010fe0826306112c55f8470c67b060b6235e58f_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:bffbcba6080e3e3034581301575ce3211a8351ff560029426c6723ea06229430_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e288f64fd5bfeb9f94ae40c346cf6a77ae09cb639440494d36db9be9962035d6_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:080632b93a8171a88c7a17ddb8dc5f1cc7801da604aae599eac28861b5b38821_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:a6e60bde307c0d6fb5fa8c115d13169287ec851ef2f3c440da3df7a9089a8f63_arm64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:b0f5035af6217c92086ae77c07f36742f31b2b36f5a24a70f801cd9ff181a264_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:59b3ca83b219cadb030d5b4805e505ad6bfa19e1a0f2130f646b2ba7e0b8394c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10140"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:c4e99fdf145fa920e4d91f291010fe0826306112c55f8470c67b060b6235e58f_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:bffbcba6080e3e3034581301575ce3211a8351ff560029426c6723ea06229430_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e288f64fd5bfeb9f94ae40c346cf6a77ae09cb639440494d36db9be9962035d6_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:080632b93a8171a88c7a17ddb8dc5f1cc7801da604aae599eac28861b5b38821_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:a6e60bde307c0d6fb5fa8c115d13169287ec851ef2f3c440da3df7a9089a8f63_arm64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:b0f5035af6217c92086ae77c07f36742f31b2b36f5a24a70f801cd9ff181a264_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:59b3ca83b219cadb030d5b4805e505ad6bfa19e1a0f2130f646b2ba7e0b8394c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:c4e99fdf145fa920e4d91f291010fe0826306112c55f8470c67b060b6235e58f_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:bffbcba6080e3e3034581301575ce3211a8351ff560029426c6723ea06229430_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e288f64fd5bfeb9f94ae40c346cf6a77ae09cb639440494d36db9be9962035d6_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:080632b93a8171a88c7a17ddb8dc5f1cc7801da604aae599eac28861b5b38821_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:a6e60bde307c0d6fb5fa8c115d13169287ec851ef2f3c440da3df7a9089a8f63_arm64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:b0f5035af6217c92086ae77c07f36742f31b2b36f5a24a70f801cd9ff181a264_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:59b3ca83b219cadb030d5b4805e505ad6bfa19e1a0f2130f646b2ba7e0b8394c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules"
},
{
"cve": "CVE-2026-25679",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-03-06T22:02:11.567841+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445356"
}
],
"notes": [
{
"category": "description",
"text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: Incorrect parsing of IPv6 host literals in net/url",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:c4e99fdf145fa920e4d91f291010fe0826306112c55f8470c67b060b6235e58f_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:bffbcba6080e3e3034581301575ce3211a8351ff560029426c6723ea06229430_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e288f64fd5bfeb9f94ae40c346cf6a77ae09cb639440494d36db9be9962035d6_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:080632b93a8171a88c7a17ddb8dc5f1cc7801da604aae599eac28861b5b38821_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:a6e60bde307c0d6fb5fa8c115d13169287ec851ef2f3c440da3df7a9089a8f63_arm64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:b0f5035af6217c92086ae77c07f36742f31b2b36f5a24a70f801cd9ff181a264_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:59b3ca83b219cadb030d5b4805e505ad6bfa19e1a0f2130f646b2ba7e0b8394c_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "RHBZ#2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://go.dev/cl/752180",
"url": "https://go.dev/cl/752180"
},
{
"category": "external",
"summary": "https://go.dev/issue/77578",
"url": "https://go.dev/issue/77578"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4601",
"url": "https://pkg.go.dev/vuln/GO-2026-4601"
}
],
"release_date": "2026-03-06T21:28:14.211000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T13:34:50+00:00",
"details": "Before applying this update, ensure all previously released errata relevant to your system have been applied.",
"product_ids": [
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:c4e99fdf145fa920e4d91f291010fe0826306112c55f8470c67b060b6235e58f_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:bffbcba6080e3e3034581301575ce3211a8351ff560029426c6723ea06229430_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e288f64fd5bfeb9f94ae40c346cf6a77ae09cb639440494d36db9be9962035d6_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:080632b93a8171a88c7a17ddb8dc5f1cc7801da604aae599eac28861b5b38821_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:a6e60bde307c0d6fb5fa8c115d13169287ec851ef2f3c440da3df7a9089a8f63_arm64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:b0f5035af6217c92086ae77c07f36742f31b2b36f5a24a70f801cd9ff181a264_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:59b3ca83b219cadb030d5b4805e505ad6bfa19e1a0f2130f646b2ba7e0b8394c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10140"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:c4e99fdf145fa920e4d91f291010fe0826306112c55f8470c67b060b6235e58f_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:bffbcba6080e3e3034581301575ce3211a8351ff560029426c6723ea06229430_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e288f64fd5bfeb9f94ae40c346cf6a77ae09cb639440494d36db9be9962035d6_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:080632b93a8171a88c7a17ddb8dc5f1cc7801da604aae599eac28861b5b38821_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:a6e60bde307c0d6fb5fa8c115d13169287ec851ef2f3c440da3df7a9089a8f63_arm64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:b0f5035af6217c92086ae77c07f36742f31b2b36f5a24a70f801cd9ff181a264_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:59b3ca83b219cadb030d5b4805e505ad6bfa19e1a0f2130f646b2ba7e0b8394c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:c4e99fdf145fa920e4d91f291010fe0826306112c55f8470c67b060b6235e58f_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:bffbcba6080e3e3034581301575ce3211a8351ff560029426c6723ea06229430_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e288f64fd5bfeb9f94ae40c346cf6a77ae09cb639440494d36db9be9962035d6_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:080632b93a8171a88c7a17ddb8dc5f1cc7801da604aae599eac28861b5b38821_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:a6e60bde307c0d6fb5fa8c115d13169287ec851ef2f3c440da3df7a9089a8f63_arm64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:b0f5035af6217c92086ae77c07f36742f31b2b36f5a24a70f801cd9ff181a264_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:59b3ca83b219cadb030d5b4805e505ad6bfa19e1a0f2130f646b2ba7e0b8394c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/url: Incorrect parsing of IPv6 host literals in net/url"
},
{
"cve": "CVE-2026-27893",
"cwe": {
"id": "CWE-501",
"name": "Trust Boundary Violation"
},
"discovery_date": "2026-03-27T00:01:43.935417+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452055"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in vLLM, an inference and serving engine for large language models (LLMs). Two model implementation files hardcode `trust_remote_code=True` when loading sub-components. This bypasses the user\u0027s explicit `--trust-remote-code=False` security opt-out, allowing a remote attacker to achieve remote code execution through malicious model repositories.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vllm: vLLM: Remote code execution due to hardcoded trust_remote_code setting",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important vulnerability in vLLM, as shipped in Red Hat AI Inference Server and Red Hat OpenShift AI. The flaw allows remote code execution due to vLLM hardcoding `trust_remote_code=True` when loading sub-components, which bypasses the user\u0027s explicit `--trust-remote-code=False` security opt-out. This can lead to exploitation through malicious model repositories.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:c4e99fdf145fa920e4d91f291010fe0826306112c55f8470c67b060b6235e58f_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:bffbcba6080e3e3034581301575ce3211a8351ff560029426c6723ea06229430_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e288f64fd5bfeb9f94ae40c346cf6a77ae09cb639440494d36db9be9962035d6_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:080632b93a8171a88c7a17ddb8dc5f1cc7801da604aae599eac28861b5b38821_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:a6e60bde307c0d6fb5fa8c115d13169287ec851ef2f3c440da3df7a9089a8f63_arm64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:b0f5035af6217c92086ae77c07f36742f31b2b36f5a24a70f801cd9ff181a264_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:59b3ca83b219cadb030d5b4805e505ad6bfa19e1a0f2130f646b2ba7e0b8394c_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27893"
},
{
"category": "external",
"summary": "RHBZ#2452055",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452055"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27893",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27893"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27893",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27893"
},
{
"category": "external",
"summary": "https://github.com/vllm-project/vllm/commit/00bd08edeee5dd4d4c13277c0114a464011acf72",
"url": "https://github.com/vllm-project/vllm/commit/00bd08edeee5dd4d4c13277c0114a464011acf72"
},
{
"category": "external",
"summary": "https://github.com/vllm-project/vllm/pull/36192",
"url": "https://github.com/vllm-project/vllm/pull/36192"
},
{
"category": "external",
"summary": "https://github.com/vllm-project/vllm/security/advisories/GHSA-7972-pg2x-xr59",
"url": "https://github.com/vllm-project/vllm/security/advisories/GHSA-7972-pg2x-xr59"
}
],
"release_date": "2026-03-26T23:56:53.579000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T13:34:50+00:00",
"details": "Before applying this update, ensure all previously released errata relevant to your system have been applied.",
"product_ids": [
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:c4e99fdf145fa920e4d91f291010fe0826306112c55f8470c67b060b6235e58f_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:bffbcba6080e3e3034581301575ce3211a8351ff560029426c6723ea06229430_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e288f64fd5bfeb9f94ae40c346cf6a77ae09cb639440494d36db9be9962035d6_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:080632b93a8171a88c7a17ddb8dc5f1cc7801da604aae599eac28861b5b38821_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:a6e60bde307c0d6fb5fa8c115d13169287ec851ef2f3c440da3df7a9089a8f63_arm64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:b0f5035af6217c92086ae77c07f36742f31b2b36f5a24a70f801cd9ff181a264_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:59b3ca83b219cadb030d5b4805e505ad6bfa19e1a0f2130f646b2ba7e0b8394c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10140"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:c4e99fdf145fa920e4d91f291010fe0826306112c55f8470c67b060b6235e58f_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:bffbcba6080e3e3034581301575ce3211a8351ff560029426c6723ea06229430_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e288f64fd5bfeb9f94ae40c346cf6a77ae09cb639440494d36db9be9962035d6_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:080632b93a8171a88c7a17ddb8dc5f1cc7801da604aae599eac28861b5b38821_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:a6e60bde307c0d6fb5fa8c115d13169287ec851ef2f3c440da3df7a9089a8f63_arm64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:b0f5035af6217c92086ae77c07f36742f31b2b36f5a24a70f801cd9ff181a264_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:59b3ca83b219cadb030d5b4805e505ad6bfa19e1a0f2130f646b2ba7e0b8394c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:c4e99fdf145fa920e4d91f291010fe0826306112c55f8470c67b060b6235e58f_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:bffbcba6080e3e3034581301575ce3211a8351ff560029426c6723ea06229430_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e288f64fd5bfeb9f94ae40c346cf6a77ae09cb639440494d36db9be9962035d6_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:080632b93a8171a88c7a17ddb8dc5f1cc7801da604aae599eac28861b5b38821_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:a6e60bde307c0d6fb5fa8c115d13169287ec851ef2f3c440da3df7a9089a8f63_arm64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:b0f5035af6217c92086ae77c07f36742f31b2b36f5a24a70f801cd9ff181a264_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:59b3ca83b219cadb030d5b4805e505ad6bfa19e1a0f2130f646b2ba7e0b8394c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "vllm: vLLM: Remote code execution due to hardcoded trust_remote_code setting"
},
{
"cve": "CVE-2026-32597",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-03-12T22:01:29.967713+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2447194"
}
],
"notes": [
{
"category": "description",
"text": "A missing verification step has been discovered in PyJWT. PyJWT does not validate the crit (Critical) Header Parameter defined in RFC 7515 \u00a74.1.11. When a JWS token contains a crit array listing extensions that PyJWT does not understand, the library accepts the token instead of rejecting it. This violates the MUST requirement in the RFC.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyjwt: PyJWT accepts unknown `crit` header extensions (RFC 7515 \u00a74.1.11 MUST violation)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:c4e99fdf145fa920e4d91f291010fe0826306112c55f8470c67b060b6235e58f_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:bffbcba6080e3e3034581301575ce3211a8351ff560029426c6723ea06229430_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e288f64fd5bfeb9f94ae40c346cf6a77ae09cb639440494d36db9be9962035d6_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:080632b93a8171a88c7a17ddb8dc5f1cc7801da604aae599eac28861b5b38821_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:a6e60bde307c0d6fb5fa8c115d13169287ec851ef2f3c440da3df7a9089a8f63_arm64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:b0f5035af6217c92086ae77c07f36742f31b2b36f5a24a70f801cd9ff181a264_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:59b3ca83b219cadb030d5b4805e505ad6bfa19e1a0f2130f646b2ba7e0b8394c_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32597"
},
{
"category": "external",
"summary": "RHBZ#2447194",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447194"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32597",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32597"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32597",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32597"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-752w-5fwx-jx9f",
"url": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-752w-5fwx-jx9f"
}
],
"release_date": "2026-03-12T21:41:50.427000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T13:34:50+00:00",
"details": "Before applying this update, ensure all previously released errata relevant to your system have been applied.",
"product_ids": [
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:c4e99fdf145fa920e4d91f291010fe0826306112c55f8470c67b060b6235e58f_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:bffbcba6080e3e3034581301575ce3211a8351ff560029426c6723ea06229430_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e288f64fd5bfeb9f94ae40c346cf6a77ae09cb639440494d36db9be9962035d6_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:080632b93a8171a88c7a17ddb8dc5f1cc7801da604aae599eac28861b5b38821_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:a6e60bde307c0d6fb5fa8c115d13169287ec851ef2f3c440da3df7a9089a8f63_arm64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:b0f5035af6217c92086ae77c07f36742f31b2b36f5a24a70f801cd9ff181a264_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:59b3ca83b219cadb030d5b4805e505ad6bfa19e1a0f2130f646b2ba7e0b8394c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10140"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:c4e99fdf145fa920e4d91f291010fe0826306112c55f8470c67b060b6235e58f_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:bffbcba6080e3e3034581301575ce3211a8351ff560029426c6723ea06229430_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e288f64fd5bfeb9f94ae40c346cf6a77ae09cb639440494d36db9be9962035d6_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:080632b93a8171a88c7a17ddb8dc5f1cc7801da604aae599eac28861b5b38821_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:a6e60bde307c0d6fb5fa8c115d13169287ec851ef2f3c440da3df7a9089a8f63_arm64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:b0f5035af6217c92086ae77c07f36742f31b2b36f5a24a70f801cd9ff181a264_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:59b3ca83b219cadb030d5b4805e505ad6bfa19e1a0f2130f646b2ba7e0b8394c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:c4e99fdf145fa920e4d91f291010fe0826306112c55f8470c67b060b6235e58f_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:bffbcba6080e3e3034581301575ce3211a8351ff560029426c6723ea06229430_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e288f64fd5bfeb9f94ae40c346cf6a77ae09cb639440494d36db9be9962035d6_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:080632b93a8171a88c7a17ddb8dc5f1cc7801da604aae599eac28861b5b38821_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:a6e60bde307c0d6fb5fa8c115d13169287ec851ef2f3c440da3df7a9089a8f63_arm64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:b0f5035af6217c92086ae77c07f36742f31b2b36f5a24a70f801cd9ff181a264_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:59b3ca83b219cadb030d5b4805e505ad6bfa19e1a0f2130f646b2ba7e0b8394c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pyjwt: PyJWT accepts unknown `crit` header extensions (RFC 7515 \u00a74.1.11 MUST violation)"
}
]
}
RHSA-2026:10141
Vulnerability from csaf_redhat - Published: 2026-04-23 13:36 - Updated: 2026-07-02 12:54A flaw was found in Python. The `webbrowser.open()` API, used to launch web browsers, does not properly sanitize input. This allows a remote attacker to craft a malicious URL containing leading dashes. When such a URL is opened, certain web browsers may interpret these dashes as command-line options, which could lead to unexpected behavior, information disclosure, or potentially arbitrary code execution, impacting the integrity of the system.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c60621bae671ef55db3e1f474d78d9ba22109518604dc694d7ef49ef2d240059_amd64 | — |
Vendor Fix
fix
Workaround
|
A flaw was found in the Python webbrowser.open() API. If a specially crafted URL containing "%action" is processed, an attacker could bypass a previous mitigation for CVE-2026-4519. This bypass allows for command injection into the underlying shell, potentially leading to arbitrary code execution.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c60621bae671ef55db3e1f474d78d9ba22109518604dc694d7ef49ef2d240059_amd64 | — |
Vendor Fix
fix
Workaround
|
A flaw was found in Python's decompression modules, including `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile`. This vulnerability, a use-after-free, can occur if a program attempts to re-use a decompression object after a memory allocation error, especially when the system is experiencing high memory usage. Exploitation of this flaw could potentially allow an attacker to execute arbitrary code or access sensitive data. The vulnerability is only present if the program re-uses decompressor instances across multiple decompression calls even after a `MemoryError` is raised during decompression. Using the helper functions to one-shot decompress data such as `lzma.decompress()`, `bz2.decompress()`, `gzip.decompress()`, and `zlib.decompress()` are not affected as a new decompressor instance is used per call. If the decompressor instance is not re-used after an error condition, this usage is similarly not vulnerable.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c60621bae671ef55db3e1f474d78d9ba22109518604dc694d7ef49ef2d240059_amd64 | — |
Vendor Fix
fix
Workaround
|
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c60621bae671ef55db3e1f474d78d9ba22109518604dc694d7ef49ef2d240059_amd64 | — |
Vendor Fix
fix
Workaround
|
A flaw was found in vLLM, an inference and serving engine for large language models (LLMs). Two model implementation files hardcode `trust_remote_code=True` when loading sub-components. This bypasses the user's explicit `--trust-remote-code=False` security opt-out, allowing a remote attacker to achieve remote code execution through malicious model repositories.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c60621bae671ef55db3e1f474d78d9ba22109518604dc694d7ef49ef2d240059_amd64 | — |
Vendor Fix
fix
Workaround
|
A missing verification step has been discovered in PyJWT. PyJWT does not validate the crit (Critical) Header Parameter defined in RFC 7515 §4.1.11. When a JWS token contains a crit array listing extensions that PyJWT does not understand, the library accepts the token instead of rejecting it. This violates the MUST requirement in the RFC.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c60621bae671ef55db3e1f474d78d9ba22109518604dc694d7ef49ef2d240059_amd64 | — |
Vendor Fix
fix
Workaround
|
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat Enterprise Linux AI 3.3.1 is now available.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat\u00ae Enterprise Linux\u00ae AI is a foundation model platform to seamlessly develop, test,\nand run Granite family large language models (LLMs) for enterprise applications.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:10141",
"url": "https://access.redhat.com/errata/RHSA-2026:10141"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25679",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27893",
"url": "https://access.redhat.com/security/cve/CVE-2026-27893"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32597",
"url": "https://access.redhat.com/security/cve/CVE-2026-32597"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4519",
"url": "https://access.redhat.com/security/cve/CVE-2026-4519"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4786",
"url": "https://access.redhat.com/security/cve/CVE-2026-4786"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-6100",
"url": "https://access.redhat.com/security/cve/CVE-2026-6100"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://www.redhat.com/en/technologies/linux-platforms/enterprise-linux/ai",
"url": "https://www.redhat.com/en/technologies/linux-platforms/enterprise-linux/ai"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_10141.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Enterprise Linux AI 3.3.1",
"tracking": {
"current_release_date": "2026-07-02T12:54:05+00:00",
"generator": {
"date": "2026-07-02T12:54:05+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.1"
}
},
"id": "RHSA-2026:10141",
"initial_release_date": "2026-04-23T13:36:23+00:00",
"revision_history": [
{
"date": "2026-04-23T13:36:23+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-04-23T13:36:38+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-02T12:54:05+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AI 3.3",
"product": {
"name": "Red Hat Enterprise Linux AI 3.3",
"product_id": "Red Hat Enterprise Linux AI 3.3",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux_ai:3.3::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux AI"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c60621bae671ef55db3e1f474d78d9ba22109518604dc694d7ef49ef2d240059_amd64",
"product": {
"name": "registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c60621bae671ef55db3e1f474d78d9ba22109518604dc694d7ef49ef2d240059_amd64",
"product_id": "registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c60621bae671ef55db3e1f474d78d9ba22109518604dc694d7ef49ef2d240059_amd64",
"product_identification_helper": {
"purl": "pkg:oci/disk-image-cuda-rhel9@sha256%3Ac60621bae671ef55db3e1f474d78d9ba22109518604dc694d7ef49ef2d240059?arch=amd64\u0026repository_url=registry.redhat.io/rhelai3\u0026tag=1776938871"
}
}
}
],
"category": "architecture",
"name": "amd64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c60621bae671ef55db3e1f474d78d9ba22109518604dc694d7ef49ef2d240059_amd64 as a component of Red Hat Enterprise Linux AI 3.3",
"product_id": "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c60621bae671ef55db3e1f474d78d9ba22109518604dc694d7ef49ef2d240059_amd64"
},
"product_reference": "registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c60621bae671ef55db3e1f474d78d9ba22109518604dc694d7ef49ef2d240059_amd64",
"relates_to_product_reference": "Red Hat Enterprise Linux AI 3.3"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-4519",
"cwe": {
"id": "CWE-88",
"name": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)"
},
"discovery_date": "2026-03-20T16:02:13.494105+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449649"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Python. The `webbrowser.open()` API, used to launch web browsers, does not properly sanitize input. This allows a remote attacker to craft a malicious URL containing leading dashes. When such a URL is opened, certain web browsers may interpret these dashes as command-line options, which could lead to unexpected behavior, information disclosure, or potentially arbitrary code execution, impacting the integrity of the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: Python: Command-line option injection in webbrowser.open() via crafted URLs",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c60621bae671ef55db3e1f474d78d9ba22109518604dc694d7ef49ef2d240059_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4519"
},
{
"category": "external",
"summary": "RHBZ#2449649",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449649"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4519",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4519"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4519",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4519"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/issues/143930",
"url": "https://github.com/python/cpython/issues/143930"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/pull/143931",
"url": "https://github.com/python/cpython/pull/143931"
},
{
"category": "external",
"summary": "https://mail.python.org/archives/list/security-announce@python.org/thread/AY5NDSS433JK56Q7Q5IS7B37QFZVVOUS/",
"url": "https://mail.python.org/archives/list/security-announce@python.org/thread/AY5NDSS433JK56Q7Q5IS7B37QFZVVOUS/"
}
],
"release_date": "2026-03-20T15:08:32.576000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T13:36:23+00:00",
"details": "Before applying this update, ensure all previously released errata relevant to your system have been applied.",
"product_ids": [
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c60621bae671ef55db3e1f474d78d9ba22109518604dc694d7ef49ef2d240059_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10141"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c60621bae671ef55db3e1f474d78d9ba22109518604dc694d7ef49ef2d240059_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c60621bae671ef55db3e1f474d78d9ba22109518604dc694d7ef49ef2d240059_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "python: Python: Command-line option injection in webbrowser.open() via crafted URLs"
},
{
"cve": "CVE-2026-4786",
"cwe": {
"id": "CWE-88",
"name": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)"
},
"discovery_date": "2026-04-13T22:01:38.006388+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2458049"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Python webbrowser.open() API. If a specially crafted URL containing \"%action\" is processed, an attacker could bypass a previous mitigation for CVE-2026-4519. This bypass allows for command injection into the underlying shell, potentially leading to arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw in the Python `webbrowser.open()` API allows for command injection and arbitrary code execution when processing specially crafted URLs containing \"%action\". This bypasses a previous mitigation for CVE-2026-4519.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c60621bae671ef55db3e1f474d78d9ba22109518604dc694d7ef49ef2d240059_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4786"
},
{
"category": "external",
"summary": "RHBZ#2458049",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2458049"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4786",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4786"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4786",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4786"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/issues/148169",
"url": "https://github.com/python/cpython/issues/148169"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/pull/148170",
"url": "https://github.com/python/cpython/pull/148170"
},
{
"category": "external",
"summary": "https://mail.python.org/archives/list/security-announce@python.org/thread/JQDUNJVB4AQNTJECSUKOBDU3XCJIPSE5/",
"url": "https://mail.python.org/archives/list/security-announce@python.org/thread/JQDUNJVB4AQNTJECSUKOBDU3XCJIPSE5/"
}
],
"release_date": "2026-04-13T21:52:19.036000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T13:36:23+00:00",
"details": "Before applying this update, ensure all previously released errata relevant to your system have been applied.",
"product_ids": [
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c60621bae671ef55db3e1f474d78d9ba22109518604dc694d7ef49ef2d240059_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10141"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c60621bae671ef55db3e1f474d78d9ba22109518604dc694d7ef49ef2d240059_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c60621bae671ef55db3e1f474d78d9ba22109518604dc694d7ef49ef2d240059_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API"
},
{
"cve": "CVE-2026-6100",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-04-13T18:01:31.970255+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2457932"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Python\u0027s decompression modules, including `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile`. This vulnerability, a use-after-free, can occur if a program attempts to re-use a decompression object after a memory allocation error, especially when the system is experiencing high memory usage. Exploitation of this flaw could potentially allow an attacker to execute arbitrary code or access sensitive data. The vulnerability is only present if the program re-uses decompressor instances across multiple decompression calls even after a `MemoryError` is raised during decompression. Using the helper functions to one-shot decompress data such as `lzma.decompress()`, `bz2.decompress()`, `gzip.decompress()`, and `zlib.decompress()` are not affected as a new decompressor instance is used per call. If the decompressor instance is not re-used after an error condition, this usage is similarly not vulnerable.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The severity of this flaw is somewhat mitigated on Red Hat platforms. By default processes are not executed with root user privilege and are limited in their scope which in turn limits the impact of this flaw.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c60621bae671ef55db3e1f474d78d9ba22109518604dc694d7ef49ef2d240059_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-6100"
},
{
"category": "external",
"summary": "RHBZ#2457932",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457932"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-6100",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6100"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6100",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6100"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/commit/6a5f79c8d7bbf22b083b240910c7a8781a59437d",
"url": "https://github.com/python/cpython/commit/6a5f79c8d7bbf22b083b240910c7a8781a59437d"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/commit/8fc66aef6d7b3ae58f43f5c66f9366cc8cbbfcd2",
"url": "https://github.com/python/cpython/commit/8fc66aef6d7b3ae58f43f5c66f9366cc8cbbfcd2"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/commit/c3cf71c3366fe49acb776a639405c0eea6169c20",
"url": "https://github.com/python/cpython/commit/c3cf71c3366fe49acb776a639405c0eea6169c20"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/issues/148395",
"url": "https://github.com/python/cpython/issues/148395"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/pull/148396",
"url": "https://github.com/python/cpython/pull/148396"
},
{
"category": "external",
"summary": "https://mail.python.org/archives/list/security-announce@python.org/thread/HTWB2Z6KT5QQX4RYEZAFININDHNOSIF3/",
"url": "https://mail.python.org/archives/list/security-announce@python.org/thread/HTWB2Z6KT5QQX4RYEZAFININDHNOSIF3/"
}
],
"release_date": "2026-04-13T17:15:47.606000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T13:36:23+00:00",
"details": "Before applying this update, ensure all previously released errata relevant to your system have been applied.",
"product_ids": [
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c60621bae671ef55db3e1f474d78d9ba22109518604dc694d7ef49ef2d240059_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10141"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c60621bae671ef55db3e1f474d78d9ba22109518604dc694d7ef49ef2d240059_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c60621bae671ef55db3e1f474d78d9ba22109518604dc694d7ef49ef2d240059_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules"
},
{
"cve": "CVE-2026-25679",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-03-06T22:02:11.567841+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445356"
}
],
"notes": [
{
"category": "description",
"text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: Incorrect parsing of IPv6 host literals in net/url",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c60621bae671ef55db3e1f474d78d9ba22109518604dc694d7ef49ef2d240059_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "RHBZ#2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://go.dev/cl/752180",
"url": "https://go.dev/cl/752180"
},
{
"category": "external",
"summary": "https://go.dev/issue/77578",
"url": "https://go.dev/issue/77578"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4601",
"url": "https://pkg.go.dev/vuln/GO-2026-4601"
}
],
"release_date": "2026-03-06T21:28:14.211000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T13:36:23+00:00",
"details": "Before applying this update, ensure all previously released errata relevant to your system have been applied.",
"product_ids": [
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c60621bae671ef55db3e1f474d78d9ba22109518604dc694d7ef49ef2d240059_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10141"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c60621bae671ef55db3e1f474d78d9ba22109518604dc694d7ef49ef2d240059_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c60621bae671ef55db3e1f474d78d9ba22109518604dc694d7ef49ef2d240059_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/url: Incorrect parsing of IPv6 host literals in net/url"
},
{
"cve": "CVE-2026-27893",
"cwe": {
"id": "CWE-501",
"name": "Trust Boundary Violation"
},
"discovery_date": "2026-03-27T00:01:43.935417+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452055"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in vLLM, an inference and serving engine for large language models (LLMs). Two model implementation files hardcode `trust_remote_code=True` when loading sub-components. This bypasses the user\u0027s explicit `--trust-remote-code=False` security opt-out, allowing a remote attacker to achieve remote code execution through malicious model repositories.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vllm: vLLM: Remote code execution due to hardcoded trust_remote_code setting",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important vulnerability in vLLM, as shipped in Red Hat AI Inference Server and Red Hat OpenShift AI. The flaw allows remote code execution due to vLLM hardcoding `trust_remote_code=True` when loading sub-components, which bypasses the user\u0027s explicit `--trust-remote-code=False` security opt-out. This can lead to exploitation through malicious model repositories.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c60621bae671ef55db3e1f474d78d9ba22109518604dc694d7ef49ef2d240059_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27893"
},
{
"category": "external",
"summary": "RHBZ#2452055",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452055"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27893",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27893"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27893",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27893"
},
{
"category": "external",
"summary": "https://github.com/vllm-project/vllm/commit/00bd08edeee5dd4d4c13277c0114a464011acf72",
"url": "https://github.com/vllm-project/vllm/commit/00bd08edeee5dd4d4c13277c0114a464011acf72"
},
{
"category": "external",
"summary": "https://github.com/vllm-project/vllm/pull/36192",
"url": "https://github.com/vllm-project/vllm/pull/36192"
},
{
"category": "external",
"summary": "https://github.com/vllm-project/vllm/security/advisories/GHSA-7972-pg2x-xr59",
"url": "https://github.com/vllm-project/vllm/security/advisories/GHSA-7972-pg2x-xr59"
}
],
"release_date": "2026-03-26T23:56:53.579000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T13:36:23+00:00",
"details": "Before applying this update, ensure all previously released errata relevant to your system have been applied.",
"product_ids": [
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c60621bae671ef55db3e1f474d78d9ba22109518604dc694d7ef49ef2d240059_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10141"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c60621bae671ef55db3e1f474d78d9ba22109518604dc694d7ef49ef2d240059_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c60621bae671ef55db3e1f474d78d9ba22109518604dc694d7ef49ef2d240059_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "vllm: vLLM: Remote code execution due to hardcoded trust_remote_code setting"
},
{
"cve": "CVE-2026-32597",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-03-12T22:01:29.967713+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2447194"
}
],
"notes": [
{
"category": "description",
"text": "A missing verification step has been discovered in PyJWT. PyJWT does not validate the crit (Critical) Header Parameter defined in RFC 7515 \u00a74.1.11. When a JWS token contains a crit array listing extensions that PyJWT does not understand, the library accepts the token instead of rejecting it. This violates the MUST requirement in the RFC.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyjwt: PyJWT accepts unknown `crit` header extensions (RFC 7515 \u00a74.1.11 MUST violation)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c60621bae671ef55db3e1f474d78d9ba22109518604dc694d7ef49ef2d240059_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32597"
},
{
"category": "external",
"summary": "RHBZ#2447194",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447194"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32597",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32597"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32597",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32597"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-752w-5fwx-jx9f",
"url": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-752w-5fwx-jx9f"
}
],
"release_date": "2026-03-12T21:41:50.427000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T13:36:23+00:00",
"details": "Before applying this update, ensure all previously released errata relevant to your system have been applied.",
"product_ids": [
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c60621bae671ef55db3e1f474d78d9ba22109518604dc694d7ef49ef2d240059_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10141"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c60621bae671ef55db3e1f474d78d9ba22109518604dc694d7ef49ef2d240059_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:c60621bae671ef55db3e1f474d78d9ba22109518604dc694d7ef49ef2d240059_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pyjwt: PyJWT accepts unknown `crit` header extensions (RFC 7515 \u00a74.1.11 MUST violation)"
}
]
}
RHSA-2026:10158
Vulnerability from csaf_redhat - Published: 2026-04-23 14:13 - Updated: 2026-07-02 13:10A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le | — |
Vendor Fix
fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x | — |
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le | — |
Vendor Fix
fix
Workaround
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x | — |
Workaround
|
A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le | — |
Vendor Fix
fix
Workaround
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x | — |
Workaround
|
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64 | — |
Vendor Fix
fix
Workaround
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x | — |
Workaround
|
A flaw was found in Tekton Pipelines, specifically in the Tekton Pipelines git resolver. A tenant with permissions to create ResolutionRequests can exploit a path traversal vulnerability via the `pathInRepo` parameter. This allows the tenant to read arbitrary files from the resolver pod's filesystem, leading to information disclosure, including sensitive ServiceAccount tokens. The contents of these files are returned in a base64-encoded format.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x | — |
Vendor Fix
fix
Workaround
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x | — |
Workaround
|
A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le | — |
Vendor Fix
fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x | — |
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat OpenShift Builds 1.7.2",
"title": "Topic"
},
{
"category": "general",
"text": "Releases of Red Hat OpenShift Builds 1.7.2",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:10158",
"url": "https://access.redhat.com/errata/RHSA-2026:10158"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-68121",
"url": "https://access.redhat.com/security/cve/CVE-2025-68121"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25679",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27137",
"url": "https://access.redhat.com/security/cve/CVE-2026-27137"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33211",
"url": "https://access.redhat.com/security/cve/CVE-2026-33211"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33810",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/builds_for_red_hat_openshift/1.7",
"url": "https://docs.redhat.com/en/documentation/builds_for_red_hat_openshift/1.7"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_10158.json"
}
],
"title": "Red Hat Security Advisory: Red Hat OpenShift Builds 1.7.2",
"tracking": {
"current_release_date": "2026-07-02T13:10:35+00:00",
"generator": {
"date": "2026-07-02T13:10:35+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.1"
}
},
"id": "RHSA-2026:10158",
"initial_release_date": "2026-04-23T14:13:54+00:00",
"revision_history": [
{
"date": "2026-04-23T14:13:54+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-04-23T14:14:00+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-02T13:10:35+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift Builds 1.7.3",
"product": {
"name": "Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift_builds:1.7::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Builds"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-controller-rhel9@sha256%3A5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776846689"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-git-cloner-rhel9@sha256%3A165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776847166"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-bundler-rhel9@sha256%3A985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776846372"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-processing-rhel9@sha256%3Af5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776849396"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-rhel9-operator@sha256%3A5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776860241"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-operator-bundle@sha256%3A093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776937971"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-rhel9@sha256%3A16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776851459"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-webhook-rhel9@sha256%3Af2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776852111"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-waiters-rhel9@sha256%3A153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776846936"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-webhook-rhel9@sha256%3A6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776846493"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-controller-rhel9@sha256%3Aeb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776846689"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-git-cloner-rhel9@sha256%3A7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776847166"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-bundler-rhel9@sha256%3A0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776846372"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-processing-rhel9@sha256%3A2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776849396"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-rhel9-operator@sha256%3A382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776860241"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-rhel9@sha256%3A4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776851459"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-webhook-rhel9@sha256%3Ab020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776852111"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-waiters-rhel9@sha256%3Acd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776846936"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-webhook-rhel9@sha256%3A1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776846493"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-controller-rhel9@sha256%3A6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776846689"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-git-cloner-rhel9@sha256%3Aec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776847166"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-bundler-rhel9@sha256%3A4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776846372"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-processing-rhel9@sha256%3A9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776849396"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-rhel9-operator@sha256%3A190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776860241"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-rhel9@sha256%3A678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776851459"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-webhook-rhel9@sha256%3A88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776852111"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-waiters-rhel9@sha256%3Af17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776846936"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-webhook-rhel9@sha256%3A779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776846493"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-controller-rhel9@sha256%3A5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776846689"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-git-cloner-rhel9@sha256%3Aa4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776847166"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-bundler-rhel9@sha256%3A8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776846372"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-processing-rhel9@sha256%3A679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776849396"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-rhel9-operator@sha256%3A7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776860241"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-rhel9@sha256%3Ab39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776851459"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-webhook-rhel9@sha256%3A1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776852111"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-waiters-rhel9@sha256%3Ab2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776846936"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-webhook-rhel9@sha256%3Ae593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776846493"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64 as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64 as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64 as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64 as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64 as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64 as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64 as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64 as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64 as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64 as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64 as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64 as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64 as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64 as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64 as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64 as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64 as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64 as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64 as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-68121",
"discovery_date": "2026-02-05T18:01:30.086058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2437111"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is a moderate flaw because it only occurs under specific conditions, such as TLS session resumption with runtime changes to certificate authority settings. Exploitation is not straightforward and requires a controlled setup. The impact is limited to certificate validation within the same component and does not affect system availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-68121"
},
{
"category": "external",
"summary": "RHBZ#2437111",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437111"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-68121",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68121"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121"
},
{
"category": "external",
"summary": "https://go.dev/cl/737700",
"url": "https://go.dev/cl/737700"
},
{
"category": "external",
"summary": "https://go.dev/issue/77217",
"url": "https://go.dev/issue/77217"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk",
"url": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4337",
"url": "https://pkg.go.dev/vuln/GO-2026-4337"
}
],
"release_date": "2026-02-05T17:48:44.141000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T14:13:54+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Builds 1.7.1 upgrades to to 1.7.2",
"product_ids": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10158"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption"
},
{
"cve": "CVE-2026-25679",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-03-06T22:02:11.567841+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445356"
}
],
"notes": [
{
"category": "description",
"text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: Incorrect parsing of IPv6 host literals in net/url",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "RHBZ#2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://go.dev/cl/752180",
"url": "https://go.dev/cl/752180"
},
{
"category": "external",
"summary": "https://go.dev/issue/77578",
"url": "https://go.dev/issue/77578"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4601",
"url": "https://pkg.go.dev/vuln/GO-2026-4601"
}
],
"release_date": "2026-03-06T21:28:14.211000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T14:13:54+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Builds 1.7.1 upgrades to to 1.7.2",
"product_ids": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10158"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/url: Incorrect parsing of IPv6 host literals in net/url"
},
{
"cve": "CVE-2026-27137",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-03-06T22:01:38.859733+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445345"
}
],
"notes": [
{
"category": "description",
"text": "A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27137"
},
{
"category": "external",
"summary": "RHBZ#2445345",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445345"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27137",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27137"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137"
},
{
"category": "external",
"summary": "https://go.dev/cl/752182",
"url": "https://go.dev/cl/752182"
},
{
"category": "external",
"summary": "https://go.dev/issue/77952",
"url": "https://go.dev/issue/77952"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4599",
"url": "https://pkg.go.dev/vuln/GO-2026-4599"
}
],
"release_date": "2026-03-06T21:28:13.748000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T14:13:54+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Builds 1.7.1 upgrades to to 1.7.2",
"product_ids": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10158"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T14:13:54+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Builds 1.7.1 upgrades to to 1.7.2",
"product_ids": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10158"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-33211",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-03-24T00:02:20.093480+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2450554"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Tekton Pipelines, specifically in the Tekton Pipelines git resolver. A tenant with permissions to create ResolutionRequests can exploit a path traversal vulnerability via the `pathInRepo` parameter. This allows the tenant to read arbitrary files from the resolver pod\u0027s filesystem, leading to information disclosure, including sensitive ServiceAccount tokens. The contents of these files are returned in a base64-encoded format.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Tekton Pipelines: github.com/tektoncd/pipeline: Tekton Pipelines: Information disclosure via path traversal in git resolver",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker needs to have the permission to create ResolutionRequests (e.g., by creating TaskRuns or PipelineRuns that use the git resolver) within at least one specific namespace, limiting the exposure of this issue to authenticated users. Also, an attacker can read any file readable by the resolver pod process, including cluster secrets, allowing an escalation of privileges from namespace-scoped access to cluster-wide access. Due to these reasons, this vulnerability has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x"
],
"known_not_affected": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33211"
},
{
"category": "external",
"summary": "RHBZ#2450554",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450554"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33211",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33211"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33211",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33211"
},
{
"category": "external",
"summary": "https://github.com/tektoncd/pipeline/commit/10fa538f9a2b6d01c75138f1ed7ba3da0e34687c",
"url": "https://github.com/tektoncd/pipeline/commit/10fa538f9a2b6d01c75138f1ed7ba3da0e34687c"
},
{
"category": "external",
"summary": "https://github.com/tektoncd/pipeline/commit/318006c4e3a5",
"url": "https://github.com/tektoncd/pipeline/commit/318006c4e3a5"
},
{
"category": "external",
"summary": "https://github.com/tektoncd/pipeline/commit/3ca7bc6e6dd1d97f80b84f78370d91edaf023cbd",
"url": "https://github.com/tektoncd/pipeline/commit/3ca7bc6e6dd1d97f80b84f78370d91edaf023cbd"
},
{
"category": "external",
"summary": "https://github.com/tektoncd/pipeline/commit/961388fcf3374bc7656d28ab58ca84987e0a75ae",
"url": "https://github.com/tektoncd/pipeline/commit/961388fcf3374bc7656d28ab58ca84987e0a75ae"
},
{
"category": "external",
"summary": "https://github.com/tektoncd/pipeline/commit/b1fee65b88aa969069c14c120045e97c37d9ee5e",
"url": "https://github.com/tektoncd/pipeline/commit/b1fee65b88aa969069c14c120045e97c37d9ee5e"
},
{
"category": "external",
"summary": "https://github.com/tektoncd/pipeline/commit/cdb4e1e97a4f3170f9bc2cbfff83a6c8107bc3db",
"url": "https://github.com/tektoncd/pipeline/commit/cdb4e1e97a4f3170f9bc2cbfff83a6c8107bc3db"
},
{
"category": "external",
"summary": "https://github.com/tektoncd/pipeline/commit/ec7755031a183b345cf9e64bea0e0505c1b9cb78",
"url": "https://github.com/tektoncd/pipeline/commit/ec7755031a183b345cf9e64bea0e0505c1b9cb78"
},
{
"category": "external",
"summary": "https://github.com/tektoncd/pipeline/security/advisories/GHSA-j5q5-j9gm-2w5c",
"url": "https://github.com/tektoncd/pipeline/security/advisories/GHSA-j5q5-j9gm-2w5c"
}
],
"release_date": "2026-03-23T23:55:54.089000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T14:13:54+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Builds 1.7.1 upgrades to to 1.7.2",
"product_ids": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10158"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, restrict the creation of ResolutionRequests to trusted users and service accounts. Implement strict Role-Based Access Control (RBAC) policies to limit which tenants can create TaskRuns or PipelineRuns that utilize the Tekton Pipelines git resolver. This reduces the exposure by preventing unauthorized access to the resolver pod\u0027s filesystem.",
"product_ids": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Tekton Pipelines: github.com/tektoncd/pipeline: Tekton Pipelines: Information disclosure via path traversal in git resolver"
},
{
"cve": "CVE-2026-33810",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-08T02:01:09.100830+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456335"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "RHBZ#2456335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456335"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33810",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33810"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://go.dev/cl/763763",
"url": "https://go.dev/cl/763763"
},
{
"category": "external",
"summary": "https://go.dev/issue/78332",
"url": "https://go.dev/issue/78332"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4866",
"url": "https://pkg.go.dev/vuln/GO-2026-4866"
}
],
"release_date": "2026-04-08T01:06:56.546000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T14:13:54+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Builds 1.7.1 upgrades to to 1.7.2",
"product_ids": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10158"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application"
}
]
}
RHSA-2026:10169
Vulnerability from csaf_redhat - Published: 2026-04-23 17:49 - Updated: 2026-07-02 12:39The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.1.Z:rhc-worker-playbook-0:0.2.3-4.el10_1.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:rhc-worker-playbook-0:0.2.3-4.el10_1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:rhc-worker-playbook-0:0.2.3-4.el10_1.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:rhc-worker-playbook-0:0.2.3-4.el10_1.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:rhc-worker-playbook-0:0.2.3-4.el10_1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:rhc-worker-playbook-debuginfo-0:0.2.3-4.el10_1.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:rhc-worker-playbook-debuginfo-0:0.2.3-4.el10_1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:rhc-worker-playbook-debuginfo-0:0.2.3-4.el10_1.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:rhc-worker-playbook-debuginfo-0:0.2.3-4.el10_1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:rhc-worker-playbook-debugsource-0:0.2.3-4.el10_1.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:rhc-worker-playbook-debugsource-0:0.2.3-4.el10_1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:rhc-worker-playbook-debugsource-0:0.2.3-4.el10_1.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:rhc-worker-playbook-debugsource-0:0.2.3-4.el10_1.x86_64 | — |
Vendor Fix
fix
Workaround
|
A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.1.Z:rhc-worker-playbook-0:0.2.3-4.el10_1.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:rhc-worker-playbook-0:0.2.3-4.el10_1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:rhc-worker-playbook-0:0.2.3-4.el10_1.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:rhc-worker-playbook-0:0.2.3-4.el10_1.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:rhc-worker-playbook-0:0.2.3-4.el10_1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:rhc-worker-playbook-debuginfo-0:0.2.3-4.el10_1.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:rhc-worker-playbook-debuginfo-0:0.2.3-4.el10_1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:rhc-worker-playbook-debuginfo-0:0.2.3-4.el10_1.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:rhc-worker-playbook-debuginfo-0:0.2.3-4.el10_1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:rhc-worker-playbook-debugsource-0:0.2.3-4.el10_1.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:rhc-worker-playbook-debugsource-0:0.2.3-4.el10_1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:rhc-worker-playbook-debugsource-0:0.2.3-4.el10_1.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:rhc-worker-playbook-debugsource-0:0.2.3-4.el10_1.x86_64 | — |
Vendor Fix
fix
Workaround
|
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for rhc-worker-playbook is now available for Red Hat Enterprise Linux 10.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "A worker for yggdrasil that receives Ansible playbooks and executes them against the local host.\n\nSecurity Fix(es):\n\n* crypto/x509: Incorrect enforcement of email constraints in crypto/x509 (CVE-2026-27137)\n\n* net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:10169",
"url": "https://access.redhat.com/errata/RHSA-2026:10169"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2445345",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445345"
},
{
"category": "external",
"summary": "2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_10169.json"
}
],
"title": "Red Hat Security Advisory: rhc-worker-playbook security update",
"tracking": {
"current_release_date": "2026-07-02T12:39:05+00:00",
"generator": {
"date": "2026-07-02T12:39:05+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.1"
}
},
"id": "RHSA-2026:10169",
"initial_release_date": "2026-04-23T17:49:58+00:00",
"revision_history": [
{
"date": "2026-04-23T17:49:58+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-04-23T17:49:58+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-02T12:39:05+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 10)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:10.1"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "rhc-worker-playbook-0:0.2.3-4.el10_1.src",
"product": {
"name": "rhc-worker-playbook-0:0.2.3-4.el10_1.src",
"product_id": "rhc-worker-playbook-0:0.2.3-4.el10_1.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhc-worker-playbook@0.2.3-4.el10_1?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "rhc-worker-playbook-0:0.2.3-4.el10_1.aarch64",
"product": {
"name": "rhc-worker-playbook-0:0.2.3-4.el10_1.aarch64",
"product_id": "rhc-worker-playbook-0:0.2.3-4.el10_1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhc-worker-playbook@0.2.3-4.el10_1?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "rhc-worker-playbook-debugsource-0:0.2.3-4.el10_1.aarch64",
"product": {
"name": "rhc-worker-playbook-debugsource-0:0.2.3-4.el10_1.aarch64",
"product_id": "rhc-worker-playbook-debugsource-0:0.2.3-4.el10_1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhc-worker-playbook-debugsource@0.2.3-4.el10_1?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "rhc-worker-playbook-debuginfo-0:0.2.3-4.el10_1.aarch64",
"product": {
"name": "rhc-worker-playbook-debuginfo-0:0.2.3-4.el10_1.aarch64",
"product_id": "rhc-worker-playbook-debuginfo-0:0.2.3-4.el10_1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhc-worker-playbook-debuginfo@0.2.3-4.el10_1?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "rhc-worker-playbook-0:0.2.3-4.el10_1.ppc64le",
"product": {
"name": "rhc-worker-playbook-0:0.2.3-4.el10_1.ppc64le",
"product_id": "rhc-worker-playbook-0:0.2.3-4.el10_1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhc-worker-playbook@0.2.3-4.el10_1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "rhc-worker-playbook-debugsource-0:0.2.3-4.el10_1.ppc64le",
"product": {
"name": "rhc-worker-playbook-debugsource-0:0.2.3-4.el10_1.ppc64le",
"product_id": "rhc-worker-playbook-debugsource-0:0.2.3-4.el10_1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhc-worker-playbook-debugsource@0.2.3-4.el10_1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "rhc-worker-playbook-debuginfo-0:0.2.3-4.el10_1.ppc64le",
"product": {
"name": "rhc-worker-playbook-debuginfo-0:0.2.3-4.el10_1.ppc64le",
"product_id": "rhc-worker-playbook-debuginfo-0:0.2.3-4.el10_1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhc-worker-playbook-debuginfo@0.2.3-4.el10_1?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "rhc-worker-playbook-0:0.2.3-4.el10_1.s390x",
"product": {
"name": "rhc-worker-playbook-0:0.2.3-4.el10_1.s390x",
"product_id": "rhc-worker-playbook-0:0.2.3-4.el10_1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhc-worker-playbook@0.2.3-4.el10_1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "rhc-worker-playbook-debugsource-0:0.2.3-4.el10_1.s390x",
"product": {
"name": "rhc-worker-playbook-debugsource-0:0.2.3-4.el10_1.s390x",
"product_id": "rhc-worker-playbook-debugsource-0:0.2.3-4.el10_1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhc-worker-playbook-debugsource@0.2.3-4.el10_1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "rhc-worker-playbook-debuginfo-0:0.2.3-4.el10_1.s390x",
"product": {
"name": "rhc-worker-playbook-debuginfo-0:0.2.3-4.el10_1.s390x",
"product_id": "rhc-worker-playbook-debuginfo-0:0.2.3-4.el10_1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhc-worker-playbook-debuginfo@0.2.3-4.el10_1?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "rhc-worker-playbook-0:0.2.3-4.el10_1.x86_64",
"product": {
"name": "rhc-worker-playbook-0:0.2.3-4.el10_1.x86_64",
"product_id": "rhc-worker-playbook-0:0.2.3-4.el10_1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhc-worker-playbook@0.2.3-4.el10_1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rhc-worker-playbook-debugsource-0:0.2.3-4.el10_1.x86_64",
"product": {
"name": "rhc-worker-playbook-debugsource-0:0.2.3-4.el10_1.x86_64",
"product_id": "rhc-worker-playbook-debugsource-0:0.2.3-4.el10_1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhc-worker-playbook-debugsource@0.2.3-4.el10_1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rhc-worker-playbook-debuginfo-0:0.2.3-4.el10_1.x86_64",
"product": {
"name": "rhc-worker-playbook-debuginfo-0:0.2.3-4.el10_1.x86_64",
"product_id": "rhc-worker-playbook-debuginfo-0:0.2.3-4.el10_1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhc-worker-playbook-debuginfo@0.2.3-4.el10_1?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-worker-playbook-0:0.2.3-4.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:rhc-worker-playbook-0:0.2.3-4.el10_1.aarch64"
},
"product_reference": "rhc-worker-playbook-0:0.2.3-4.el10_1.aarch64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-worker-playbook-0:0.2.3-4.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:rhc-worker-playbook-0:0.2.3-4.el10_1.ppc64le"
},
"product_reference": "rhc-worker-playbook-0:0.2.3-4.el10_1.ppc64le",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-worker-playbook-0:0.2.3-4.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:rhc-worker-playbook-0:0.2.3-4.el10_1.s390x"
},
"product_reference": "rhc-worker-playbook-0:0.2.3-4.el10_1.s390x",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-worker-playbook-0:0.2.3-4.el10_1.src as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:rhc-worker-playbook-0:0.2.3-4.el10_1.src"
},
"product_reference": "rhc-worker-playbook-0:0.2.3-4.el10_1.src",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-worker-playbook-0:0.2.3-4.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:rhc-worker-playbook-0:0.2.3-4.el10_1.x86_64"
},
"product_reference": "rhc-worker-playbook-0:0.2.3-4.el10_1.x86_64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-worker-playbook-debuginfo-0:0.2.3-4.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:rhc-worker-playbook-debuginfo-0:0.2.3-4.el10_1.aarch64"
},
"product_reference": "rhc-worker-playbook-debuginfo-0:0.2.3-4.el10_1.aarch64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-worker-playbook-debuginfo-0:0.2.3-4.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:rhc-worker-playbook-debuginfo-0:0.2.3-4.el10_1.ppc64le"
},
"product_reference": "rhc-worker-playbook-debuginfo-0:0.2.3-4.el10_1.ppc64le",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-worker-playbook-debuginfo-0:0.2.3-4.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:rhc-worker-playbook-debuginfo-0:0.2.3-4.el10_1.s390x"
},
"product_reference": "rhc-worker-playbook-debuginfo-0:0.2.3-4.el10_1.s390x",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-worker-playbook-debuginfo-0:0.2.3-4.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:rhc-worker-playbook-debuginfo-0:0.2.3-4.el10_1.x86_64"
},
"product_reference": "rhc-worker-playbook-debuginfo-0:0.2.3-4.el10_1.x86_64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-worker-playbook-debugsource-0:0.2.3-4.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:rhc-worker-playbook-debugsource-0:0.2.3-4.el10_1.aarch64"
},
"product_reference": "rhc-worker-playbook-debugsource-0:0.2.3-4.el10_1.aarch64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-worker-playbook-debugsource-0:0.2.3-4.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:rhc-worker-playbook-debugsource-0:0.2.3-4.el10_1.ppc64le"
},
"product_reference": "rhc-worker-playbook-debugsource-0:0.2.3-4.el10_1.ppc64le",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-worker-playbook-debugsource-0:0.2.3-4.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:rhc-worker-playbook-debugsource-0:0.2.3-4.el10_1.s390x"
},
"product_reference": "rhc-worker-playbook-debugsource-0:0.2.3-4.el10_1.s390x",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-worker-playbook-debugsource-0:0.2.3-4.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:rhc-worker-playbook-debugsource-0:0.2.3-4.el10_1.x86_64"
},
"product_reference": "rhc-worker-playbook-debugsource-0:0.2.3-4.el10_1.x86_64",
"relates_to_product_reference": "AppStream-10.1.Z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-25679",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-03-06T22:02:11.567841+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445356"
}
],
"notes": [
{
"category": "description",
"text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: Incorrect parsing of IPv6 host literals in net/url",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.1.Z:rhc-worker-playbook-0:0.2.3-4.el10_1.aarch64",
"AppStream-10.1.Z:rhc-worker-playbook-0:0.2.3-4.el10_1.ppc64le",
"AppStream-10.1.Z:rhc-worker-playbook-0:0.2.3-4.el10_1.s390x",
"AppStream-10.1.Z:rhc-worker-playbook-0:0.2.3-4.el10_1.src",
"AppStream-10.1.Z:rhc-worker-playbook-0:0.2.3-4.el10_1.x86_64",
"AppStream-10.1.Z:rhc-worker-playbook-debuginfo-0:0.2.3-4.el10_1.aarch64",
"AppStream-10.1.Z:rhc-worker-playbook-debuginfo-0:0.2.3-4.el10_1.ppc64le",
"AppStream-10.1.Z:rhc-worker-playbook-debuginfo-0:0.2.3-4.el10_1.s390x",
"AppStream-10.1.Z:rhc-worker-playbook-debuginfo-0:0.2.3-4.el10_1.x86_64",
"AppStream-10.1.Z:rhc-worker-playbook-debugsource-0:0.2.3-4.el10_1.aarch64",
"AppStream-10.1.Z:rhc-worker-playbook-debugsource-0:0.2.3-4.el10_1.ppc64le",
"AppStream-10.1.Z:rhc-worker-playbook-debugsource-0:0.2.3-4.el10_1.s390x",
"AppStream-10.1.Z:rhc-worker-playbook-debugsource-0:0.2.3-4.el10_1.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "RHBZ#2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://go.dev/cl/752180",
"url": "https://go.dev/cl/752180"
},
{
"category": "external",
"summary": "https://go.dev/issue/77578",
"url": "https://go.dev/issue/77578"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4601",
"url": "https://pkg.go.dev/vuln/GO-2026-4601"
}
],
"release_date": "2026-03-06T21:28:14.211000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T17:49:58+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.1.Z:rhc-worker-playbook-0:0.2.3-4.el10_1.aarch64",
"AppStream-10.1.Z:rhc-worker-playbook-0:0.2.3-4.el10_1.ppc64le",
"AppStream-10.1.Z:rhc-worker-playbook-0:0.2.3-4.el10_1.s390x",
"AppStream-10.1.Z:rhc-worker-playbook-0:0.2.3-4.el10_1.src",
"AppStream-10.1.Z:rhc-worker-playbook-0:0.2.3-4.el10_1.x86_64",
"AppStream-10.1.Z:rhc-worker-playbook-debuginfo-0:0.2.3-4.el10_1.aarch64",
"AppStream-10.1.Z:rhc-worker-playbook-debuginfo-0:0.2.3-4.el10_1.ppc64le",
"AppStream-10.1.Z:rhc-worker-playbook-debuginfo-0:0.2.3-4.el10_1.s390x",
"AppStream-10.1.Z:rhc-worker-playbook-debuginfo-0:0.2.3-4.el10_1.x86_64",
"AppStream-10.1.Z:rhc-worker-playbook-debugsource-0:0.2.3-4.el10_1.aarch64",
"AppStream-10.1.Z:rhc-worker-playbook-debugsource-0:0.2.3-4.el10_1.ppc64le",
"AppStream-10.1.Z:rhc-worker-playbook-debugsource-0:0.2.3-4.el10_1.s390x",
"AppStream-10.1.Z:rhc-worker-playbook-debugsource-0:0.2.3-4.el10_1.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10169"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-10.1.Z:rhc-worker-playbook-0:0.2.3-4.el10_1.aarch64",
"AppStream-10.1.Z:rhc-worker-playbook-0:0.2.3-4.el10_1.ppc64le",
"AppStream-10.1.Z:rhc-worker-playbook-0:0.2.3-4.el10_1.s390x",
"AppStream-10.1.Z:rhc-worker-playbook-0:0.2.3-4.el10_1.src",
"AppStream-10.1.Z:rhc-worker-playbook-0:0.2.3-4.el10_1.x86_64",
"AppStream-10.1.Z:rhc-worker-playbook-debuginfo-0:0.2.3-4.el10_1.aarch64",
"AppStream-10.1.Z:rhc-worker-playbook-debuginfo-0:0.2.3-4.el10_1.ppc64le",
"AppStream-10.1.Z:rhc-worker-playbook-debuginfo-0:0.2.3-4.el10_1.s390x",
"AppStream-10.1.Z:rhc-worker-playbook-debuginfo-0:0.2.3-4.el10_1.x86_64",
"AppStream-10.1.Z:rhc-worker-playbook-debugsource-0:0.2.3-4.el10_1.aarch64",
"AppStream-10.1.Z:rhc-worker-playbook-debugsource-0:0.2.3-4.el10_1.ppc64le",
"AppStream-10.1.Z:rhc-worker-playbook-debugsource-0:0.2.3-4.el10_1.s390x",
"AppStream-10.1.Z:rhc-worker-playbook-debugsource-0:0.2.3-4.el10_1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.1.Z:rhc-worker-playbook-0:0.2.3-4.el10_1.aarch64",
"AppStream-10.1.Z:rhc-worker-playbook-0:0.2.3-4.el10_1.ppc64le",
"AppStream-10.1.Z:rhc-worker-playbook-0:0.2.3-4.el10_1.s390x",
"AppStream-10.1.Z:rhc-worker-playbook-0:0.2.3-4.el10_1.src",
"AppStream-10.1.Z:rhc-worker-playbook-0:0.2.3-4.el10_1.x86_64",
"AppStream-10.1.Z:rhc-worker-playbook-debuginfo-0:0.2.3-4.el10_1.aarch64",
"AppStream-10.1.Z:rhc-worker-playbook-debuginfo-0:0.2.3-4.el10_1.ppc64le",
"AppStream-10.1.Z:rhc-worker-playbook-debuginfo-0:0.2.3-4.el10_1.s390x",
"AppStream-10.1.Z:rhc-worker-playbook-debuginfo-0:0.2.3-4.el10_1.x86_64",
"AppStream-10.1.Z:rhc-worker-playbook-debugsource-0:0.2.3-4.el10_1.aarch64",
"AppStream-10.1.Z:rhc-worker-playbook-debugsource-0:0.2.3-4.el10_1.ppc64le",
"AppStream-10.1.Z:rhc-worker-playbook-debugsource-0:0.2.3-4.el10_1.s390x",
"AppStream-10.1.Z:rhc-worker-playbook-debugsource-0:0.2.3-4.el10_1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/url: Incorrect parsing of IPv6 host literals in net/url"
},
{
"cve": "CVE-2026-27137",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-03-06T22:01:38.859733+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445345"
}
],
"notes": [
{
"category": "description",
"text": "A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.1.Z:rhc-worker-playbook-0:0.2.3-4.el10_1.aarch64",
"AppStream-10.1.Z:rhc-worker-playbook-0:0.2.3-4.el10_1.ppc64le",
"AppStream-10.1.Z:rhc-worker-playbook-0:0.2.3-4.el10_1.s390x",
"AppStream-10.1.Z:rhc-worker-playbook-0:0.2.3-4.el10_1.src",
"AppStream-10.1.Z:rhc-worker-playbook-0:0.2.3-4.el10_1.x86_64",
"AppStream-10.1.Z:rhc-worker-playbook-debuginfo-0:0.2.3-4.el10_1.aarch64",
"AppStream-10.1.Z:rhc-worker-playbook-debuginfo-0:0.2.3-4.el10_1.ppc64le",
"AppStream-10.1.Z:rhc-worker-playbook-debuginfo-0:0.2.3-4.el10_1.s390x",
"AppStream-10.1.Z:rhc-worker-playbook-debuginfo-0:0.2.3-4.el10_1.x86_64",
"AppStream-10.1.Z:rhc-worker-playbook-debugsource-0:0.2.3-4.el10_1.aarch64",
"AppStream-10.1.Z:rhc-worker-playbook-debugsource-0:0.2.3-4.el10_1.ppc64le",
"AppStream-10.1.Z:rhc-worker-playbook-debugsource-0:0.2.3-4.el10_1.s390x",
"AppStream-10.1.Z:rhc-worker-playbook-debugsource-0:0.2.3-4.el10_1.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27137"
},
{
"category": "external",
"summary": "RHBZ#2445345",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445345"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27137",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27137"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137"
},
{
"category": "external",
"summary": "https://go.dev/cl/752182",
"url": "https://go.dev/cl/752182"
},
{
"category": "external",
"summary": "https://go.dev/issue/77952",
"url": "https://go.dev/issue/77952"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4599",
"url": "https://pkg.go.dev/vuln/GO-2026-4599"
}
],
"release_date": "2026-03-06T21:28:13.748000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T17:49:58+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.1.Z:rhc-worker-playbook-0:0.2.3-4.el10_1.aarch64",
"AppStream-10.1.Z:rhc-worker-playbook-0:0.2.3-4.el10_1.ppc64le",
"AppStream-10.1.Z:rhc-worker-playbook-0:0.2.3-4.el10_1.s390x",
"AppStream-10.1.Z:rhc-worker-playbook-0:0.2.3-4.el10_1.src",
"AppStream-10.1.Z:rhc-worker-playbook-0:0.2.3-4.el10_1.x86_64",
"AppStream-10.1.Z:rhc-worker-playbook-debuginfo-0:0.2.3-4.el10_1.aarch64",
"AppStream-10.1.Z:rhc-worker-playbook-debuginfo-0:0.2.3-4.el10_1.ppc64le",
"AppStream-10.1.Z:rhc-worker-playbook-debuginfo-0:0.2.3-4.el10_1.s390x",
"AppStream-10.1.Z:rhc-worker-playbook-debuginfo-0:0.2.3-4.el10_1.x86_64",
"AppStream-10.1.Z:rhc-worker-playbook-debugsource-0:0.2.3-4.el10_1.aarch64",
"AppStream-10.1.Z:rhc-worker-playbook-debugsource-0:0.2.3-4.el10_1.ppc64le",
"AppStream-10.1.Z:rhc-worker-playbook-debugsource-0:0.2.3-4.el10_1.s390x",
"AppStream-10.1.Z:rhc-worker-playbook-debugsource-0:0.2.3-4.el10_1.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10169"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-10.1.Z:rhc-worker-playbook-0:0.2.3-4.el10_1.aarch64",
"AppStream-10.1.Z:rhc-worker-playbook-0:0.2.3-4.el10_1.ppc64le",
"AppStream-10.1.Z:rhc-worker-playbook-0:0.2.3-4.el10_1.s390x",
"AppStream-10.1.Z:rhc-worker-playbook-0:0.2.3-4.el10_1.src",
"AppStream-10.1.Z:rhc-worker-playbook-0:0.2.3-4.el10_1.x86_64",
"AppStream-10.1.Z:rhc-worker-playbook-debuginfo-0:0.2.3-4.el10_1.aarch64",
"AppStream-10.1.Z:rhc-worker-playbook-debuginfo-0:0.2.3-4.el10_1.ppc64le",
"AppStream-10.1.Z:rhc-worker-playbook-debuginfo-0:0.2.3-4.el10_1.s390x",
"AppStream-10.1.Z:rhc-worker-playbook-debuginfo-0:0.2.3-4.el10_1.x86_64",
"AppStream-10.1.Z:rhc-worker-playbook-debugsource-0:0.2.3-4.el10_1.aarch64",
"AppStream-10.1.Z:rhc-worker-playbook-debugsource-0:0.2.3-4.el10_1.ppc64le",
"AppStream-10.1.Z:rhc-worker-playbook-debugsource-0:0.2.3-4.el10_1.s390x",
"AppStream-10.1.Z:rhc-worker-playbook-debugsource-0:0.2.3-4.el10_1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.1.Z:rhc-worker-playbook-0:0.2.3-4.el10_1.aarch64",
"AppStream-10.1.Z:rhc-worker-playbook-0:0.2.3-4.el10_1.ppc64le",
"AppStream-10.1.Z:rhc-worker-playbook-0:0.2.3-4.el10_1.s390x",
"AppStream-10.1.Z:rhc-worker-playbook-0:0.2.3-4.el10_1.src",
"AppStream-10.1.Z:rhc-worker-playbook-0:0.2.3-4.el10_1.x86_64",
"AppStream-10.1.Z:rhc-worker-playbook-debuginfo-0:0.2.3-4.el10_1.aarch64",
"AppStream-10.1.Z:rhc-worker-playbook-debuginfo-0:0.2.3-4.el10_1.ppc64le",
"AppStream-10.1.Z:rhc-worker-playbook-debuginfo-0:0.2.3-4.el10_1.s390x",
"AppStream-10.1.Z:rhc-worker-playbook-debuginfo-0:0.2.3-4.el10_1.x86_64",
"AppStream-10.1.Z:rhc-worker-playbook-debugsource-0:0.2.3-4.el10_1.aarch64",
"AppStream-10.1.Z:rhc-worker-playbook-debugsource-0:0.2.3-4.el10_1.ppc64le",
"AppStream-10.1.Z:rhc-worker-playbook-debugsource-0:0.2.3-4.el10_1.s390x",
"AppStream-10.1.Z:rhc-worker-playbook-debugsource-0:0.2.3-4.el10_1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509"
}
]
}
RHSA-2026:10175
Vulnerability from csaf_redhat - Published: 2026-04-23 14:43 - Updated: 2026-07-02 13:10A flaw was found in the archive/zip package in the Go standard library. A super-linear file name indexing algorithm is used in the first time a file in an archive is opened. A crafted zip archive containing a specific arrangement of file names can cause an excessive CPU and memory consumption. A Go application processing a malicious archive can become unresponsive or crash, resulting in a denial of service.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x | — |
Vendor Fix
fix
Workaround
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64 | — |
Workaround
|
A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not correctly handle hostname normalization when evaluating NO_PROXY rules. An attacker can exploit this by crafting requests to loopback addresses (e.g., localhost. or [::1]) which bypass the NO_PROXY configuration and are routed through the configured proxy. This can lead to Server-Side Request Forgery (SSRF) vulnerabilities, enabling attackers to access sensitive internal or loopback services that should otherwise be protected.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le | — |
Vendor Fix
fix
Workaround
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x | — |
Workaround
|
A flaw was found in Eclipse Jetty. The HTTP/1.1 parser is vulnerable to request smuggling when chunk extensions are used. An attacker can inject crafted requests to manipulate and trick the parser. This issue can lead to security controls bypass, cache poisoning or unauthorized endpoint access.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x | — |
Vendor Fix
fix
Workaround
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x | — |
Workaround
|
A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x | — |
Vendor Fix
fix
Workaround
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x | — |
Workaround
|
A flaw was found in path-to-regexp. A remote attacker could exploit this vulnerability by providing specially crafted input that generates a regular expression with multiple sequential optional groups. This leads to an exponential growth in the generated regular expression, causing a Denial of Service (DoS) due to excessive resource consumption.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64 | — |
Vendor Fix
fix
Workaround
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x | — |
Workaround
|
A flaw was found in Spring Boot. This vulnerability, an authentication bypass, occurs when an application endpoint requiring authentication is declared under a specific path already configured for a Health Group additional path. A remote attacker could exploit this to bypass authentication, potentially gaining unauthorized access to sensitive application endpoints. This could lead to information disclosure or unauthorized actions.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x | — |
Vendor Fix
fix
Workaround
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x | — |
Workaround
|
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x | — |
Vendor Fix
fix
Workaround
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64 | — |
Workaround
|
A flaw was found in Traefik, an HTTP reverse proxy and load balancer. A remote unauthenticated client can exploit this vulnerability by sending an incomplete Transport Layer Security (TLS) record, which causes the TLS handshake to stall indefinitely. This can lead to resource exhaustion, such as file descriptors and goroutines, ultimately degrading the availability of all services on the affected entrypoint, resulting in a Denial of Service (DoS).
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le | — |
Vendor Fix
fix
Workaround
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x | — |
Workaround
|
A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x | — |
Vendor Fix
fix
Workaround
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64 | — |
Workaround
|
A flaw was found in Rollup, a JavaScript module bundler. Insecure file name sanitization in the core engine allows an attacker to control output filenames, potentially through command-line interface (CLI) inputs, manual chunk aliases, or malicious plugins. By using directory traversal sequences (`../`), an attacker can overwrite files anywhere on the host filesystem where the build process has write permissions. This vulnerability can lead to persistent remote code execution (RCE) by overwriting critical system or user configuration files.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le | — |
Vendor Fix
fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x | — |
A flaw was found in Traefik, an HTTP reverse proxy and load balancer. A remote unauthenticated client can exploit a case sensitivity vulnerability in how Traefik processes HTTP/1.1 requests. By using lowercase tokens in the Connection header, an attacker can bypass security protections, leading to the removal of Traefik-managed forwarded identity headers. This could result in information disclosure or misattribution of client requests.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le | — |
Vendor Fix
fix
Workaround
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x | — |
Workaround
|
A flaw was found in Traefik, an HTTP reverse proxy and load balancer. A remote attacker can exploit this vulnerability by sending fragmented ClientHello packets during the Transport Layer Security (TLS) handshake. This causes Traefik's Server Name Indication (SNI) extraction to fail, leading to a fallback to a default TLS configuration that does not require client certificates. This allows an attacker to bypass mutual TLS (mTLS) authentication, gaining unauthorized access to services that should be protected by client certificate requirements.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le | — |
Vendor Fix
fix
Workaround
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x | — |
Workaround
|
A flaw was found in Traefik, an HTTP reverse proxy and load balancer. When using the Knative provider, Traefik incorrectly interpolates user-controlled values into router rule expressions without proper escaping. This vulnerability allows an attacker to inject malicious rule syntax, leading to a host restriction bypass. In multi-tenant environments, this can result in unauthorized traffic being routed to victim services, potentially exposing cross-tenant traffic.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le | — |
Vendor Fix
fix
Workaround
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x | — |
Workaround
|
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x | — |
Vendor Fix
fix
Workaround
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64 | — |
Workaround
|
A flaw was found in Traefik, an HTTP reverse proxy and load balancer. When the `headerField` is configured with a non-canonical HTTP header name, an authenticated attacker can inject a canonical version of that header. This allows the attacker to impersonate any identity to the backend, leading to an authentication bypass. The backend prioritizes the attacker-injected header, overriding Traefik's intended header.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le | — |
Vendor Fix
fix
Workaround
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x | — |
Workaround
|
A flaw was found in @fastify/reply-from and @fastify/http-proxy. A remote attacker can exploit this vulnerability by manipulating the Connection header in client requests. This allows the attacker to remove specific headers that the proxy has added for security, routing, or access control purposes. Consequently, an attacker could bypass security mechanisms or gain unauthorized access to resources.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le | — |
Vendor Fix
fix
Workaround
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x | — |
Workaround
|
A flaw was found in Netty. A remote attacker could exploit this vulnerability by sending specially crafted HTTP/1.1 chunked transfer encoding extension values. Due to incorrect parsing of quoted strings, this flaw enables request smuggling attacks, potentially allowing an attacker to bypass security controls or access unauthorized information.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64 | — |
Vendor Fix
fix
Workaround
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x | — |
Workaround
|
A flaw was found in Netty. A remote user can trigger a Denial of Service (DoS) against a Netty HTTP/2 server by sending a flood of CONTINUATION frames. The server's lack of a limit on these frames, coupled with a bypass of size-based mitigations using zero-byte frames, allows an attacker to consume excessive CPU resources. This can render the server unresponsive with minimal bandwidth usage.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64 | — |
Vendor Fix
fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x | — |
A flaw was found in Handlebars. An attacker can exploit this by supplying a crafted Abstract Syntax Tree (AST) object to the `Handlebars.compile()` function. This allows the injection and execution of arbitrary JavaScript code due to improper sanitization of the `value` field in `NumberLiteral` AST nodes. This vulnerability can lead to Remote Code Execution (RCE) on the server.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64 | — |
Vendor Fix
fix
Workaround
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x | — |
Workaround
|
A flaw was found in Handlebars. A remote attacker can exploit this vulnerability by manipulating the `@partial-block` special variable within the template data context. By overwriting `@partial-block` with a specially crafted Abstract Syntax Tree (AST) through a helper, a subsequent invocation of `{{> @partial-block}}` will compile and execute the malicious AST. This enables arbitrary JavaScript execution on the server, leading to potential compromise of the system.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64 | — |
Vendor Fix
fix
Workaround
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x | — |
Workaround
|
A flaw was found in Handlebars.js. A remote attacker can exploit this by submitting a malformed Handlebars template that includes decorator syntax referencing an unregistered decorator. When the application attempts to compile this template without proper error handling, it triggers an unhandled `TypeError`. This error causes the Node.js process to crash, resulting in a Denial of Service (DoS) for the affected application.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64 | — |
Vendor Fix
fix
Workaround
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x | — |
Workaround
|
A flaw was found in Handlebars.js. A remote attacker can exploit this vulnerability by providing a specially crafted object within the template context. This crafted object, when processed by a dynamic partial lookup, can bypass security checks and be interpreted as malicious code. This allows the attacker to execute arbitrary commands on the server where Handlebars.js is running.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64 | — |
Vendor Fix
fix
Workaround
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x | — |
Workaround
|
A flaw was found in Handlebars. The Handlebars command-line interface (CLI) precompiler concatenates user-controlled strings, such as template file names and CLI options, directly into the generated JavaScript without proper escaping or sanitization. An attacker capable of influencing these inputs can inject arbitrary JavaScript code. This can lead to arbitrary code execution when the generated JavaScript bundle is loaded in a Node.js environment or a web browser.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64 | — |
Vendor Fix
fix
Workaround
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x | — |
Workaround
|
A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le | — |
Vendor Fix
fix
Workaround
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x | — |
Workaround
|
A flaw was found in Axios, a promise-based HTTP client. This vulnerability, known as Prototype Pollution, can be exploited through a specific "Gadget" attack chain. This allows an attacker to escalate a Prototype Pollution vulnerability in a third-party dependency, potentially leading to remote code execution or a full cloud compromise, such as bypassing AWS IMDSv2.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le | — |
Vendor Fix
fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x | — |
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat OpenShift Dev Spaces 3.27.1 has been released.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat OpenShift Dev Spaces provides a cloud developer workspace server and a browser-based IDE built for teams and organizations. Dev Spaces runs in OpenShift and is well-suited for container-based development.\nThe 3.27 release is based on Eclipse Che 7.115 and uses the DevWorkspace engine to provide support for workspaces based on devfile v2.1 and v2.2.\nUsers still using the v1 standard should migrate as soon as possible.\nhttps://devfile.io/docs/2.2.0/migrating-to-devfile-v2\nDev Spaces supports OpenShift EUS releases v4.16 and higher. Users are expected to update to supported OpenShift releases in order to continue to get Dev Spaces updates.\nhttps://access.redhat.com/support/policy/updates/openshift#crw",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:10175",
"url": "https://access.redhat.com/errata/RHSA-2026:10175"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_openshift_dev_spaces/3.27/html/administration_guide/installing-devspaces",
"url": "https://access.redhat.com/documentation/en-us/red_hat_openshift_dev_spaces/3.27/html/administration_guide/installing-devspaces"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-61728",
"url": "https://access.redhat.com/security/cve/CVE-2025-61728"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-62718",
"url": "https://access.redhat.com/security/cve/CVE-2025-62718"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-22731",
"url": "https://access.redhat.com/security/cve/CVE-2026-22731"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-2332",
"url": "https://access.redhat.com/security/cve/CVE-2026-2332"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25679",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-26999",
"url": "https://access.redhat.com/security/cve/CVE-2026-26999"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27137",
"url": "https://access.redhat.com/security/cve/CVE-2026-27137"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27606",
"url": "https://access.redhat.com/security/cve/CVE-2026-27606"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-29054",
"url": "https://access.redhat.com/security/cve/CVE-2026-29054"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32305",
"url": "https://access.redhat.com/security/cve/CVE-2026-32305"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32695",
"url": "https://access.redhat.com/security/cve/CVE-2026-32695"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33433",
"url": "https://access.redhat.com/security/cve/CVE-2026-33433"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33805",
"url": "https://access.redhat.com/security/cve/CVE-2026-33805"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33870",
"url": "https://access.redhat.com/security/cve/CVE-2026-33870"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33871",
"url": "https://access.redhat.com/security/cve/CVE-2026-33871"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33937",
"url": "https://access.redhat.com/security/cve/CVE-2026-33937"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33938",
"url": "https://access.redhat.com/security/cve/CVE-2026-33938"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33939",
"url": "https://access.redhat.com/security/cve/CVE-2026-33939"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33940",
"url": "https://access.redhat.com/security/cve/CVE-2026-33940"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33941",
"url": "https://access.redhat.com/security/cve/CVE-2026-33941"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-34986",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-40175",
"url": "https://access.redhat.com/security/cve/CVE-2026-40175"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4800",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4926",
"url": "https://access.redhat.com/security/cve/CVE-2026-4926"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_10175.json"
}
],
"title": "Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.27.1 Release.",
"tracking": {
"current_release_date": "2026-07-02T13:10:38+00:00",
"generator": {
"date": "2026-07-02T13:10:38+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.1"
}
},
"id": "RHSA-2026:10175",
"initial_release_date": "2026-04-23T14:43:48+00:00",
"revision_history": [
{
"date": "2026-04-23T14:43:48+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-04-23T14:43:52+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-02T13:10:38+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift Dev Spaces 3.27",
"product": {
"name": "Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift_devspaces:3.27::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Dev Spaces"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"product": {
"name": "registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"product_id": "registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"product_identification_helper": {
"purl": "pkg:oci/code-rhel9@sha256%3Abaccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5?arch=amd64\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776744110"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"product": {
"name": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"product_id": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"product_identification_helper": {
"purl": "pkg:oci/code-sshd-rhel9@sha256%3A45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc?arch=amd64\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776743204"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"product": {
"name": "registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"product_id": "registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"product_identification_helper": {
"purl": "pkg:oci/configbump-rhel9@sha256%3A977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1?arch=amd64\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776718450"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"product": {
"name": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"product_id": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/dashboard-rhel9@sha256%3A339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e?arch=amd64\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776795511"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"product": {
"name": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"product_id": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/imagepuller-rhel9@sha256%3Ad3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f?arch=amd64\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776718438"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"product": {
"name": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"product_id": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"product_identification_helper": {
"purl": "pkg:oci/jetbrains-ide-rhel9@sha256%3Ade2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418?arch=amd64\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776795400"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"product": {
"name": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"product_id": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-redirector-rhel9@sha256%3A1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8?arch=amd64\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776774989"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"product": {
"name": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"product_id": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openvsx-rhel9@sha256%3Abf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e?arch=amd64\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776716842"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"product": {
"name": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"product_id": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"product_identification_helper": {
"purl": "pkg:oci/devspaces-rhel9-operator@sha256%3Ad05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6?arch=amd64\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776718480"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"product": {
"name": "registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"product_id": "registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"product_identification_helper": {
"purl": "pkg:oci/devspaces-operator-bundle@sha256%3A961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379?arch=amd64\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776803772"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"product": {
"name": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"product_id": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"product_identification_helper": {
"purl": "pkg:oci/pluginregistry-rhel9@sha256%3A27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb?arch=amd64\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776717247"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"product": {
"name": "registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"product_id": "registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"product_identification_helper": {
"purl": "pkg:oci/server-rhel9@sha256%3A57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4?arch=amd64\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776796445"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"product": {
"name": "registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"product_id": "registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"product_identification_helper": {
"purl": "pkg:oci/traefik-rhel9@sha256%3A179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736?arch=amd64\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776718585"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"product": {
"name": "registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"product_id": "registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"product_identification_helper": {
"purl": "pkg:oci/udi-rhel9@sha256%3A0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae?arch=amd64\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776789889"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"product": {
"name": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"product_id": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"product_identification_helper": {
"purl": "pkg:oci/udi-base-rhel10@sha256%3Ae1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5?arch=amd64\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776777278"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"product": {
"name": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"product_id": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"product_identification_helper": {
"purl": "pkg:oci/udi-base-rhel9@sha256%3A08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3?arch=amd64\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776778243"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"product": {
"name": "registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"product_id": "registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"product_identification_helper": {
"purl": "pkg:oci/code-rhel9@sha256%3A6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729?arch=s390x\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776744110"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"product": {
"name": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"product_id": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"product_identification_helper": {
"purl": "pkg:oci/code-sshd-rhel9@sha256%3A70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66?arch=s390x\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776743204"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"product": {
"name": "registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"product_id": "registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"product_identification_helper": {
"purl": "pkg:oci/configbump-rhel9@sha256%3A59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde?arch=s390x\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776718450"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"product": {
"name": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"product_id": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"product_identification_helper": {
"purl": "pkg:oci/dashboard-rhel9@sha256%3A13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff?arch=s390x\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776795511"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"product": {
"name": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"product_id": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/imagepuller-rhel9@sha256%3A3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e?arch=s390x\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776718438"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"product": {
"name": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"product_id": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"product_identification_helper": {
"purl": "pkg:oci/jetbrains-ide-rhel9@sha256%3A4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932?arch=s390x\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776795400"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"product": {
"name": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"product_id": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-redirector-rhel9@sha256%3A5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45?arch=s390x\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776774989"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"product": {
"name": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"product_id": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openvsx-rhel9@sha256%3Ad0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c?arch=s390x\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776716842"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"product": {
"name": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"product_id": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"product_identification_helper": {
"purl": "pkg:oci/devspaces-rhel9-operator@sha256%3A1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2?arch=s390x\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776718480"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"product": {
"name": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"product_id": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"product_identification_helper": {
"purl": "pkg:oci/pluginregistry-rhel9@sha256%3Afb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d?arch=s390x\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776717247"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"product": {
"name": "registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"product_id": "registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"product_identification_helper": {
"purl": "pkg:oci/server-rhel9@sha256%3A7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc?arch=s390x\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776796445"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"product": {
"name": "registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"product_id": "registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"product_identification_helper": {
"purl": "pkg:oci/traefik-rhel9@sha256%3Acbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c?arch=s390x\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776718585"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x",
"product": {
"name": "registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x",
"product_id": "registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x",
"product_identification_helper": {
"purl": "pkg:oci/udi-rhel9@sha256%3A7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1?arch=s390x\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776789889"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"product": {
"name": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"product_id": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"product_identification_helper": {
"purl": "pkg:oci/udi-base-rhel10@sha256%3A8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1?arch=s390x\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776777278"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"product": {
"name": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"product_id": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/udi-base-rhel9@sha256%3A9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e?arch=s390x\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776778243"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"product": {
"name": "registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"product_id": "registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/code-rhel9@sha256%3Aab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1?arch=ppc64le\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776744110"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"product": {
"name": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"product_id": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/code-sshd-rhel9@sha256%3A215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa?arch=ppc64le\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776743204"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"product": {
"name": "registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"product_id": "registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/configbump-rhel9@sha256%3A24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e?arch=ppc64le\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776718450"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"product": {
"name": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"product_id": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/dashboard-rhel9@sha256%3A633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615?arch=ppc64le\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776795511"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"product": {
"name": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"product_id": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/imagepuller-rhel9@sha256%3A926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843?arch=ppc64le\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776718438"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"product": {
"name": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"product_id": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/jetbrains-ide-rhel9@sha256%3A7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd?arch=ppc64le\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776795400"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"product": {
"name": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"product_id": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-redirector-rhel9@sha256%3A7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a?arch=ppc64le\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776774989"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"product": {
"name": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"product_id": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openvsx-rhel9@sha256%3Ab2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde?arch=ppc64le\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776716842"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"product": {
"name": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"product_id": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/devspaces-rhel9-operator@sha256%3Adcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d?arch=ppc64le\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776718480"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"product": {
"name": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"product_id": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/pluginregistry-rhel9@sha256%3Ae224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2?arch=ppc64le\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776717247"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"product": {
"name": "registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"product_id": "registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/server-rhel9@sha256%3A88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297?arch=ppc64le\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776796445"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"product": {
"name": "registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"product_id": "registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/traefik-rhel9@sha256%3Aee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641?arch=ppc64le\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776718585"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"product": {
"name": "registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"product_id": "registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/udi-rhel9@sha256%3A6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c?arch=ppc64le\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776789889"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"product": {
"name": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"product_id": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/udi-base-rhel10@sha256%3A02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a?arch=ppc64le\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776777278"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"product": {
"name": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"product_id": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/udi-base-rhel9@sha256%3A17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420?arch=ppc64le\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776778243"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"product": {
"name": "registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"product_id": "registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"product_identification_helper": {
"purl": "pkg:oci/code-rhel9@sha256%3A56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd?arch=arm64\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776744110"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"product": {
"name": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"product_id": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/code-sshd-rhel9@sha256%3Af7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f?arch=arm64\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776743204"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"product": {
"name": "registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"product_id": "registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"product_identification_helper": {
"purl": "pkg:oci/configbump-rhel9@sha256%3Acb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9?arch=arm64\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776718450"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"product": {
"name": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"product_id": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"product_identification_helper": {
"purl": "pkg:oci/dashboard-rhel9@sha256%3A25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6?arch=arm64\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776795511"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"product": {
"name": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"product_id": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"product_identification_helper": {
"purl": "pkg:oci/imagepuller-rhel9@sha256%3A6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac?arch=arm64\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776718438"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"product": {
"name": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"product_id": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"product_identification_helper": {
"purl": "pkg:oci/jetbrains-ide-rhel9@sha256%3Af72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5?arch=arm64\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776795400"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"product": {
"name": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"product_id": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-redirector-rhel9@sha256%3A4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d?arch=arm64\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776774989"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"product": {
"name": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"product_id": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openvsx-rhel9@sha256%3A12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae?arch=arm64\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776716842"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"product": {
"name": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"product_id": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"product_identification_helper": {
"purl": "pkg:oci/devspaces-rhel9-operator@sha256%3Ab725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17?arch=arm64\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776718480"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"product": {
"name": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"product_id": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"product_identification_helper": {
"purl": "pkg:oci/pluginregistry-rhel9@sha256%3Ae832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5?arch=arm64\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776717247"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"product": {
"name": "registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"product_id": "registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"product_identification_helper": {
"purl": "pkg:oci/server-rhel9@sha256%3Ad97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca?arch=arm64\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776796445"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"product": {
"name": "registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"product_id": "registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"product_identification_helper": {
"purl": "pkg:oci/traefik-rhel9@sha256%3A34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4?arch=arm64\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776718585"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"product": {
"name": "registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"product_id": "registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/udi-rhel9@sha256%3A44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f?arch=arm64\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776789889"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"product": {
"name": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"product_id": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/udi-base-rhel10@sha256%3Ae6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c?arch=arm64\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776777278"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"product": {
"name": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"product_id": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"product_identification_helper": {
"purl": "pkg:oci/udi-base-rhel9@sha256%3Ab65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5?arch=arm64\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776778243"
}
}
}
],
"category": "architecture",
"name": "arm64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64 as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64"
},
"product_reference": "registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x"
},
"product_reference": "registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le"
},
"product_reference": "registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64 as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64"
},
"product_reference": "registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le"
},
"product_reference": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64 as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64"
},
"product_reference": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x"
},
"product_reference": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64 as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64"
},
"product_reference": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le"
},
"product_reference": "registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x"
},
"product_reference": "registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64 as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64"
},
"product_reference": "registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64 as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64"
},
"product_reference": "registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x"
},
"product_reference": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64 as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64"
},
"product_reference": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64 as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64"
},
"product_reference": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le"
},
"product_reference": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64 as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64"
},
"product_reference": "registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x"
},
"product_reference": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64 as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64"
},
"product_reference": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64 as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64"
},
"product_reference": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le"
},
"product_reference": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x"
},
"product_reference": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64 as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64"
},
"product_reference": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le"
},
"product_reference": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64 as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64"
},
"product_reference": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x"
},
"product_reference": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le"
},
"product_reference": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64 as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64"
},
"product_reference": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64 as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64"
},
"product_reference": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64 as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64"
},
"product_reference": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64 as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64"
},
"product_reference": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x"
},
"product_reference": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le"
},
"product_reference": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64 as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64"
},
"product_reference": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le"
},
"product_reference": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64 as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64"
},
"product_reference": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x"
},
"product_reference": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64 as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64"
},
"product_reference": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le"
},
"product_reference": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64 as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64"
},
"product_reference": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x"
},
"product_reference": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64 as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64"
},
"product_reference": "registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x"
},
"product_reference": "registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le"
},
"product_reference": "registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64 as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64"
},
"product_reference": "registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64 as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64"
},
"product_reference": "registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64 as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64"
},
"product_reference": "registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x"
},
"product_reference": "registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le"
},
"product_reference": "registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le"
},
"product_reference": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x"
},
"product_reference": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64 as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64"
},
"product_reference": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64 as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64"
},
"product_reference": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64 as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64"
},
"product_reference": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le"
},
"product_reference": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x"
},
"product_reference": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64 as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64"
},
"product_reference": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64 as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64"
},
"product_reference": "registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64 as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64"
},
"product_reference": "registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le"
},
"product_reference": "registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
},
"product_reference": "registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-61728",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-01-28T20:01:39.965024+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2434431"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the archive/zip package in the Go standard library. A super-linear file name indexing algorithm is used in the first time a file in an archive is opened. A crafted zip archive containing a specific arrangement of file names can cause an excessive CPU and memory consumption. A Go application processing a malicious archive can become unresponsive or crash, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker needs to be able to process a malicious zip archive with an application using the archive/zip package. Additionally, this vulnerability can cause a Go application to consume an excessive amount of CPU and memory, eventually resulting in a denial of service with no other security impact. Due to these reasons, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61728"
},
{
"category": "external",
"summary": "RHBZ#2434431",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2434431"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61728",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61728"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61728",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61728"
},
{
"category": "external",
"summary": "https://go.dev/cl/736713",
"url": "https://go.dev/cl/736713"
},
{
"category": "external",
"summary": "https://go.dev/issue/77102",
"url": "https://go.dev/issue/77102"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc",
"url": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4342",
"url": "https://pkg.go.dev/vuln/GO-2026-4342"
}
],
"release_date": "2026-01-28T19:30:31.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T14:43:48+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10175"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, implement a timeout in your archive/zip processing logic to abort the operation if it exceeds a few seconds, preventing the application from consuming an excessive amount of resources.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip"
},
{
"cve": "CVE-2025-62718",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-09T15:01:48.111177+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456913"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not correctly handle hostname normalization when evaluating NO_PROXY rules. An attacker can exploit this by crafting requests to loopback addresses (e.g., localhost. or [::1]) which bypass the NO_PROXY configuration and are routed through the configured proxy. This can lead to Server-Side Request Forgery (SSRF) vulnerabilities, enabling attackers to access sensitive internal or loopback services that should otherwise be protected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw has limited impact due to combination of non-default conditions to exploit: the attacker must be able to control or influence URLs passed to axios in a server-side context, the application must have both `HTTP_PROXY` and `NO_PROXY` configured, and the proxy itself must be positioned to act on the misdirected traffic or have been compromised by the attacker to intercept the rerouted traffic.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-62718"
},
{
"category": "external",
"summary": "RHBZ#2456913",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456913"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-62718",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-62718"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-62718",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-62718"
},
{
"category": "external",
"summary": "https://datatracker.ietf.org/doc/html/rfc1034#section-3.1",
"url": "https://datatracker.ietf.org/doc/html/rfc1034#section-3.1"
},
{
"category": "external",
"summary": "https://datatracker.ietf.org/doc/html/rfc3986#section-3.2.2",
"url": "https://datatracker.ietf.org/doc/html/rfc3986#section-3.2.2"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/commit/fb3befb6daac6cad26b2e54094d0f2d9e47f24df",
"url": "https://github.com/axios/axios/commit/fb3befb6daac6cad26b2e54094d0f2d9e47f24df"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/pull/10661",
"url": "https://github.com/axios/axios/pull/10661"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/releases/tag/v1.15.0",
"url": "https://github.com/axios/axios/releases/tag/v1.15.0"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3p68-rc4w-qgx5",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3p68-rc4w-qgx5"
}
],
"release_date": "2026-04-09T14:31:46.067000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T14:43:48+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10175"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization"
},
{
"cve": "CVE-2026-2332",
"cwe": {
"id": "CWE-444",
"name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
},
"discovery_date": "2026-04-14T12:01:05.768902+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2458187"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Eclipse Jetty. The HTTP/1.1 parser is vulnerable to request smuggling when chunk extensions are used. An attacker can inject crafted requests to manipulate and trick the parser. This issue can lead to security controls bypass, cache poisoning or unauthorized endpoint access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "org.eclipse.jetty/jetty-http: HTTP request smuggling via chunked extension quoted-string parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to send a crafted payload to a Jetty server that is behind a reverse proxy or load balancer, specifically with a chunk extension that includes an unclosed double quote before the CRLF to trick the parser. This flaw allows an attacker to bypass security controls, cause cache poisoning or gain unauthorized endpoint access. Due to these reasons, this vulnerability has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-2332"
},
{
"category": "external",
"summary": "RHBZ#2458187",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2458187"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-2332",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2332"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-2332",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-2332"
},
{
"category": "external",
"summary": "https://github.com/jetty/jetty.project/security/advisories/GHSA-355h-qmc2-wpwf",
"url": "https://github.com/jetty/jetty.project/security/advisories/GHSA-355h-qmc2-wpwf"
},
{
"category": "external",
"summary": "https://gitlab.eclipse.org/security/cve-assignment/-/issues/89",
"url": "https://gitlab.eclipse.org/security/cve-assignment/-/issues/89"
}
],
"release_date": "2026-04-14T10:59:10.193000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T14:43:48+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10175"
},
{
"category": "workaround",
"details": "Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "org.eclipse.jetty/jetty-http: HTTP request smuggling via chunked extension quoted-string parsing"
},
{
"cve": "CVE-2026-4800",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-03-31T20:01:21.918257+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2453496"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "lodash: lodash: Arbitrary code execution via untrusted input in template imports",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In the context of Red Hat Enterprise Linux, the grafana and grafana-pcp packages execute the affected JavaScript entirely client-side within the user\u0027s browser. Consequently, the attack surface is strictly restricted to the local browser environment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "RHBZ#2453496",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2453496"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4800",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4800"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm",
"url": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm"
},
{
"category": "external",
"summary": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c",
"url": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c"
}
],
"release_date": "2026-03-31T19:25:55.987000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T14:43:48+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10175"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "lodash: lodash: Arbitrary code execution via untrusted input in template imports"
},
{
"cve": "CVE-2026-4926",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-03-26T20:03:28.427630+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2451867"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in path-to-regexp. A remote attacker could exploit this vulnerability by providing specially crafted input that generates a regular expression with multiple sequential optional groups. This leads to an exponential growth in the generated regular expression, causing a Denial of Service (DoS) due to excessive resource consumption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "path-to-regexp: path-to-regexp: Denial of Service via crafted regular expressions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in `path-to-regexp` that can lead to a Denial of Service. The vulnerability occurs when specially crafted input containing multiple sequential optional groups is used to generate regular expressions, causing exponential resource consumption.\n\nThe Red Hat Advanced Cluster Security is not affected by this issue since it\u0027s shipping a `path-to-regexp` version which doesn\u0027t contain the vulnerable code.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4926"
},
{
"category": "external",
"summary": "RHBZ#2451867",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451867"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4926",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4926"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4926",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4926"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
}
],
"release_date": "2026-03-26T18:59:38+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T14:43:48+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10175"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, limit the use of multiple sequential optional groups in route patterns within applications that use `path-to-regexp`. Additionally, avoid directly passing user-controlled input as route patterns to prevent the generation of maliciously crafted regular expressions.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "path-to-regexp: path-to-regexp: Denial of Service via crafted regular expressions"
},
{
"cve": "CVE-2026-22731",
"cwe": {
"id": "CWE-305",
"name": "Authentication Bypass by Primary Weakness"
},
"discovery_date": "2026-03-19T23:02:37.111109+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449290"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Spring Boot. This vulnerability, an authentication bypass, occurs when an application endpoint requiring authentication is declared under a specific path already configured for a Health Group additional path. A remote attacker could exploit this to bypass authentication, potentially gaining unauthorized access to sensitive application endpoints. This could lead to information disclosure or unauthorized actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Spring Boot: Spring Boot: Authentication bypass via misconfigured Health Group additional path",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-22731"
},
{
"category": "external",
"summary": "RHBZ#2449290",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449290"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-22731",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-22731"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-22731",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-22731"
},
{
"category": "external",
"summary": "https://spring.io/security/cve-2026-22731",
"url": "https://spring.io/security/cve-2026-22731"
}
],
"release_date": "2026-03-19T22:36:15.112000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T14:43:48+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10175"
},
{
"category": "workaround",
"details": "To mitigate, ensure that application endpoints requiring authentication are not declared under paths already configured as Health Group additional paths within Spring Boot applications using Actuator. Review and adjust your application\u0027s configuration to prevent this overlap. A redeployment of the application is required for changes to take effect.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Spring Boot: Spring Boot: Authentication bypass via misconfigured Health Group additional path"
},
{
"cve": "CVE-2026-25679",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-03-06T22:02:11.567841+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445356"
}
],
"notes": [
{
"category": "description",
"text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: Incorrect parsing of IPv6 host literals in net/url",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "RHBZ#2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://go.dev/cl/752180",
"url": "https://go.dev/cl/752180"
},
{
"category": "external",
"summary": "https://go.dev/issue/77578",
"url": "https://go.dev/issue/77578"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4601",
"url": "https://pkg.go.dev/vuln/GO-2026-4601"
}
],
"release_date": "2026-03-06T21:28:14.211000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T14:43:48+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10175"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/url: Incorrect parsing of IPv6 host literals in net/url"
},
{
"cve": "CVE-2026-26999",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-03-05T19:01:09.939098+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2444874"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Traefik, an HTTP reverse proxy and load balancer. A remote unauthenticated client can exploit this vulnerability by sending an incomplete Transport Layer Security (TLS) record, which causes the TLS handshake to stall indefinitely. This can lead to resource exhaustion, such as file descriptors and goroutines, ultimately degrading the availability of all services on the affected entrypoint, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/traefik/traefik: Traefik: Denial of Service due to incomplete TLS handshake",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-26999"
},
{
"category": "external",
"summary": "RHBZ#2444874",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2444874"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-26999",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-26999"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-26999",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-26999"
},
{
"category": "external",
"summary": "https://github.com/traefik/traefik/releases/tag/v2.11.38",
"url": "https://github.com/traefik/traefik/releases/tag/v2.11.38"
},
{
"category": "external",
"summary": "https://github.com/traefik/traefik/releases/tag/v3.6.9",
"url": "https://github.com/traefik/traefik/releases/tag/v3.6.9"
},
{
"category": "external",
"summary": "https://github.com/traefik/traefik/security/advisories/GHSA-xw98-5q62-jx94",
"url": "https://github.com/traefik/traefik/security/advisories/GHSA-xw98-5q62-jx94"
}
],
"release_date": "2026-03-05T16:15:36.437000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T14:43:48+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10175"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/traefik/traefik: Traefik: Denial of Service due to incomplete TLS handshake"
},
{
"cve": "CVE-2026-27137",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-03-06T22:01:38.859733+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445345"
}
],
"notes": [
{
"category": "description",
"text": "A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27137"
},
{
"category": "external",
"summary": "RHBZ#2445345",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445345"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27137",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27137"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137"
},
{
"category": "external",
"summary": "https://go.dev/cl/752182",
"url": "https://go.dev/cl/752182"
},
{
"category": "external",
"summary": "https://go.dev/issue/77952",
"url": "https://go.dev/issue/77952"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4599",
"url": "https://pkg.go.dev/vuln/GO-2026-4599"
}
],
"release_date": "2026-03-06T21:28:13.748000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T14:43:48+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10175"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509"
},
{
"cve": "CVE-2026-27606",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-02-25T04:01:24.449922+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2442530"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Rollup, a JavaScript module bundler. Insecure file name sanitization in the core engine allows an attacker to control output filenames, potentially through command-line interface (CLI) inputs, manual chunk aliases, or malicious plugins. By using directory traversal sequences (`../`), an attacker can overwrite files anywhere on the host filesystem where the build process has write permissions. This vulnerability can lead to persistent remote code execution (RCE) by overwriting critical system or user configuration files.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rollup: Rollup: Remote Code Execution via Path Traversal Vulnerability",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27606"
},
{
"category": "external",
"summary": "RHBZ#2442530",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2442530"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27606",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27606"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27606",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27606"
},
{
"category": "external",
"summary": "https://github.com/rollup/rollup/commit/c60770d7aaf750e512c1b2774989ea4596e660b2",
"url": "https://github.com/rollup/rollup/commit/c60770d7aaf750e512c1b2774989ea4596e660b2"
},
{
"category": "external",
"summary": "https://github.com/rollup/rollup/commit/c8cf1f9c48c516285758c1e11f08a54f304fd44e",
"url": "https://github.com/rollup/rollup/commit/c8cf1f9c48c516285758c1e11f08a54f304fd44e"
},
{
"category": "external",
"summary": "https://github.com/rollup/rollup/commit/d6dee5e99bb82aac0bee1df4ab9efbde455452c3",
"url": "https://github.com/rollup/rollup/commit/d6dee5e99bb82aac0bee1df4ab9efbde455452c3"
},
{
"category": "external",
"summary": "https://github.com/rollup/rollup/releases/tag/v2.80.0",
"url": "https://github.com/rollup/rollup/releases/tag/v2.80.0"
},
{
"category": "external",
"summary": "https://github.com/rollup/rollup/releases/tag/v3.30.0",
"url": "https://github.com/rollup/rollup/releases/tag/v3.30.0"
},
{
"category": "external",
"summary": "https://github.com/rollup/rollup/releases/tag/v4.59.0",
"url": "https://github.com/rollup/rollup/releases/tag/v4.59.0"
},
{
"category": "external",
"summary": "https://github.com/rollup/rollup/security/advisories/GHSA-mw96-cpmx-2vgc",
"url": "https://github.com/rollup/rollup/security/advisories/GHSA-mw96-cpmx-2vgc"
}
],
"release_date": "2026-02-25T02:08:06.682000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T14:43:48+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10175"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "rollup: Rollup: Remote Code Execution via Path Traversal Vulnerability"
},
{
"cve": "CVE-2026-29054",
"cwe": {
"id": "CWE-178",
"name": "Improper Handling of Case Sensitivity"
},
"discovery_date": "2026-03-05T19:01:04.119334+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2444872"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Traefik, an HTTP reverse proxy and load balancer. A remote unauthenticated client can exploit a case sensitivity vulnerability in how Traefik processes HTTP/1.1 requests. By using lowercase tokens in the Connection header, an attacker can bypass security protections, leading to the removal of Traefik-managed forwarded identity headers. This could result in information disclosure or misattribution of client requests.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/traefik/traefik: Traefik: Information disclosure due to case-insensitive Connection header processing",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-29054"
},
{
"category": "external",
"summary": "RHBZ#2444872",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2444872"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-29054",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29054"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29054",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29054"
},
{
"category": "external",
"summary": "https://github.com/traefik/traefik/releases/tag/v2.11.38",
"url": "https://github.com/traefik/traefik/releases/tag/v2.11.38"
},
{
"category": "external",
"summary": "https://github.com/traefik/traefik/releases/tag/v3.6.9",
"url": "https://github.com/traefik/traefik/releases/tag/v3.6.9"
},
{
"category": "external",
"summary": "https://github.com/traefik/traefik/security/advisories/GHSA-92mv-8f8w-wq52",
"url": "https://github.com/traefik/traefik/security/advisories/GHSA-92mv-8f8w-wq52"
}
],
"release_date": "2026-03-05T16:18:49.230000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T14:43:48+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10175"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/traefik/traefik: Traefik: Information disclosure due to case-insensitive Connection header processing"
},
{
"cve": "CVE-2026-32305",
"cwe": {
"id": "CWE-179",
"name": "Incorrect Behavior Order: Early Validation"
},
"discovery_date": "2026-03-20T11:02:42.394091+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449595"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Traefik, an HTTP reverse proxy and load balancer. A remote attacker can exploit this vulnerability by sending fragmented ClientHello packets during the Transport Layer Security (TLS) handshake. This causes Traefik\u0027s Server Name Indication (SNI) extraction to fail, leading to a fallback to a default TLS configuration that does not require client certificates. This allows an attacker to bypass mutual TLS (mTLS) authentication, gaining unauthorized access to services that should be protected by client certificate requirements.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Traefik: github.com/traefik/traefik: Traefik: mTLS bypass allows unauthorized service access via fragmented ClientHello.",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32305"
},
{
"category": "external",
"summary": "RHBZ#2449595",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449595"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32305",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32305"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32305",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32305"
},
{
"category": "external",
"summary": "https://github.com/traefik/traefik/releases/tag/v2.11.41",
"url": "https://github.com/traefik/traefik/releases/tag/v2.11.41"
},
{
"category": "external",
"summary": "https://github.com/traefik/traefik/releases/tag/v3.6.11",
"url": "https://github.com/traefik/traefik/releases/tag/v3.6.11"
},
{
"category": "external",
"summary": "https://github.com/traefik/traefik/releases/tag/v3.7.0-ea.2",
"url": "https://github.com/traefik/traefik/releases/tag/v3.7.0-ea.2"
},
{
"category": "external",
"summary": "https://github.com/traefik/traefik/security/advisories/GHSA-wvvq-wgcr-9q48",
"url": "https://github.com/traefik/traefik/security/advisories/GHSA-wvvq-wgcr-9q48"
}
],
"release_date": "2026-03-20T10:01:13.620000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T14:43:48+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10175"
},
{
"category": "workaround",
"details": "To mitigate unauthorized access, restrict network access to the Traefik instance to only trusted clients and networks. Implement firewall rules to limit inbound connections to the ports Traefik listens on for mTLS-protected services. For example, using `firewalld`, specific source IP addresses or networks can be allowed. After applying firewall rules, ensure the firewall service is reloaded for changes to take effect. This reduces the attack surface by preventing untrusted external access to the Traefik instance.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Traefik: github.com/traefik/traefik: Traefik: mTLS bypass allows unauthorized service access via fragmented ClientHello."
},
{
"cve": "CVE-2026-32695",
"cwe": {
"id": "CWE-917",
"name": "Improper Neutralization of Special Elements used in an Expression Language Statement (\u0027Expression Language Injection\u0027)"
},
"discovery_date": "2026-03-27T14:01:07.317898+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452235"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Traefik, an HTTP reverse proxy and load balancer. When using the Knative provider, Traefik incorrectly interpolates user-controlled values into router rule expressions without proper escaping. This vulnerability allows an attacker to inject malicious rule syntax, leading to a host restriction bypass. In multi-tenant environments, this can result in unauthorized traffic being routed to victim services, potentially exposing cross-tenant traffic.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/traefik/traefik: Traefik: Cross-tenant traffic exposure and host restriction bypass via rule-syntax injection in Knative provider",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32695"
},
{
"category": "external",
"summary": "RHBZ#2452235",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452235"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32695",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32695"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32695",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32695"
},
{
"category": "external",
"summary": "https://github.com/traefik/traefik/releases/tag/v3.6.11",
"url": "https://github.com/traefik/traefik/releases/tag/v3.6.11"
},
{
"category": "external",
"summary": "https://github.com/traefik/traefik/releases/tag/v3.7.0-ea.2",
"url": "https://github.com/traefik/traefik/releases/tag/v3.7.0-ea.2"
},
{
"category": "external",
"summary": "https://github.com/traefik/traefik/security/advisories/GHSA-67jx-r9pv-98rj",
"url": "https://github.com/traefik/traefik/security/advisories/GHSA-67jx-r9pv-98rj"
}
],
"release_date": "2026-03-27T13:47:03.645000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T14:43:48+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10175"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/traefik/traefik: Traefik: Cross-tenant traffic exposure and host restriction bypass via rule-syntax injection in Knative provider"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T14:43:48+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10175"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-33433",
"cwe": {
"id": "CWE-290",
"name": "Authentication Bypass by Spoofing"
},
"discovery_date": "2026-03-27T15:03:19.672851+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452289"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Traefik, an HTTP reverse proxy and load balancer. When the `headerField` is configured with a non-canonical HTTP header name, an authenticated attacker can inject a canonical version of that header. This allows the attacker to impersonate any identity to the backend, leading to an authentication bypass. The backend prioritizes the attacker-injected header, overriding Traefik\u0027s intended header.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/traefik/traefik: Traefik: Authentication bypass via non-canonical HTTP header injection",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33433"
},
{
"category": "external",
"summary": "RHBZ#2452289",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452289"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33433",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33433"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33433",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33433"
},
{
"category": "external",
"summary": "https://github.com/traefik/traefik/releases/tag/v2.11.42",
"url": "https://github.com/traefik/traefik/releases/tag/v2.11.42"
},
{
"category": "external",
"summary": "https://github.com/traefik/traefik/releases/tag/v3.6.11",
"url": "https://github.com/traefik/traefik/releases/tag/v3.6.11"
},
{
"category": "external",
"summary": "https://github.com/traefik/traefik/releases/tag/v3.7.0-ea.3",
"url": "https://github.com/traefik/traefik/releases/tag/v3.7.0-ea.3"
},
{
"category": "external",
"summary": "https://github.com/traefik/traefik/security/advisories/GHSA-qr99-7898-vr7c",
"url": "https://github.com/traefik/traefik/security/advisories/GHSA-qr99-7898-vr7c"
}
],
"release_date": "2026-03-27T13:49:08.455000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T14:43:48+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10175"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/traefik/traefik: Traefik: Authentication bypass via non-canonical HTTP header injection"
},
{
"cve": "CVE-2026-33805",
"cwe": {
"id": "CWE-444",
"name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
},
"discovery_date": "2026-04-15T11:00:57.611466+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2458651"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in @fastify/reply-from and @fastify/http-proxy. A remote attacker can exploit this vulnerability by manipulating the Connection header in client requests. This allows the attacker to remove specific headers that the proxy has added for security, routing, or access control purposes. Consequently, an attacker could bypass security mechanisms or gain unauthorized access to resources.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "@fastify/reply-from: @fastify/http-proxy: Fastify Reply From and HTTP Proxy: Security bypass via Connection header manipulation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "An Important flaw exists in @fastify/reply-from and @fastify/http-proxy, allowing a remote attacker to bypass security, routing, or access control mechanisms. This is achieved by manipulating the Connection header in client requests, which can remove critical proxy-added headers. If reply-from or http-proxy are being used to add security relevant headers the attacker may be able to remove such information resulting in authentication bypass, privilege escalations or the possibility of jeopardize any further security control which depends on the removed request headers. This vulnerability have a high attack complexity rate as the attacker needs to intercept the communication between the client and the server to be able to manipulate the headers.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33805"
},
{
"category": "external",
"summary": "RHBZ#2458651",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2458651"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33805",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33805"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33805",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33805"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/fastify/fastify-reply-from/security/advisories/GHSA-gwhp-pf74-vj37",
"url": "https://github.com/fastify/fastify-reply-from/security/advisories/GHSA-gwhp-pf74-vj37"
}
],
"release_date": "2026-04-15T10:13:25.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T14:43:48+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10175"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "@fastify/reply-from: @fastify/http-proxy: Fastify Reply From and HTTP Proxy: Security bypass via Connection header manipulation"
},
{
"cve": "CVE-2026-33870",
"cwe": {
"id": "CWE-444",
"name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
},
"discovery_date": "2026-03-27T21:01:59.865839+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452453"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Netty. A remote attacker could exploit this vulnerability by sending specially crafted HTTP/1.1 chunked transfer encoding extension values. Due to incorrect parsing of quoted strings, this flaw enables request smuggling attacks, potentially allowing an attacker to bypass security controls or access unauthorized information.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "io.netty/netty-codec-http: Netty: Request smuggling via incorrect parsing of HTTP/1.1 chunked transfer encoding extension values",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33870"
},
{
"category": "external",
"summary": "RHBZ#2452453",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452453"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33870",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33870"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33870",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33870"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-pwqr-wmgm-9rr8",
"url": "https://github.com/netty/netty/security/advisories/GHSA-pwqr-wmgm-9rr8"
},
{
"category": "external",
"summary": "https://w4ke.info/2025/06/18/funky-chunks.html",
"url": "https://w4ke.info/2025/06/18/funky-chunks.html"
},
{
"category": "external",
"summary": "https://w4ke.info/2025/10/29/funky-chunks-2.html",
"url": "https://w4ke.info/2025/10/29/funky-chunks-2.html"
},
{
"category": "external",
"summary": "https://www.rfc-editor.org/rfc/rfc9110",
"url": "https://www.rfc-editor.org/rfc/rfc9110"
}
],
"release_date": "2026-03-27T19:54:15.586000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T14:43:48+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10175"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "io.netty/netty-codec-http: Netty: Request smuggling via incorrect parsing of HTTP/1.1 chunked transfer encoding extension values"
},
{
"cve": "CVE-2026-33871",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-03-27T21:02:13.396015+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452456"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Netty. A remote user can trigger a Denial of Service (DoS) against a Netty HTTP/2 server by sending a flood of CONTINUATION frames. The server\u0027s lack of a limit on these frames, coupled with a bypass of size-based mitigations using zero-byte frames, allows an attacker to consume excessive CPU resources. This can render the server unresponsive with minimal bandwidth usage.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty: Netty: Denial of Service via HTTP/2 CONTINUATION frame flood",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This important vulnerability in Netty HTTP/2 servers allows a remote attacker to cause a Denial of Service by sending a flood of CONTINUATION frames. This can lead to excessive CPU consumption and render the server unresponsive. Red Hat products utilizing affected Netty versions, such as Red Hat AMQ, Enterprise Application Platform, and OpenShift Container Platform components, are impacted if configured to use HTTP/2.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33871"
},
{
"category": "external",
"summary": "RHBZ#2452456",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452456"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33871",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33871"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33871",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33871"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-w9fj-cfpg-grvv",
"url": "https://github.com/netty/netty/security/advisories/GHSA-w9fj-cfpg-grvv"
}
],
"release_date": "2026-03-27T19:55:23.135000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T14:43:48+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10175"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "netty: Netty: Denial of Service via HTTP/2 CONTINUATION frame flood"
},
{
"cve": "CVE-2026-33937",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-03-27T22:02:50.619819+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452523"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Handlebars. An attacker can exploit this by supplying a crafted Abstract Syntax Tree (AST) object to the `Handlebars.compile()` function. This allows the injection and execution of arbitrary JavaScript code due to improper sanitization of the `value` field in `NumberLiteral` AST nodes. This vulnerability can lead to Remote Code Execution (RCE) on the server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "handlebars.js: Handlebars: Remote Code Execution via crafted Abstract Syntax Tree object in compile()",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important vulnerability in Handlebars that allows for Remote Code Execution. The flaw occurs when the `Handlebars.compile()` function processes a specially crafted Abstract Syntax Tree (AST) object, leading to the injection and execution of arbitrary JavaScript code. Red Hat products utilizing Handlebars are affected if they process untrusted input through the `compile()` function.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33937"
},
{
"category": "external",
"summary": "RHBZ#2452523",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452523"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33937",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33937"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33937",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33937"
},
{
"category": "external",
"summary": "https://github.com/handlebars-lang/handlebars.js/commit/68d8df5a88e0a26fe9e6084c5c6aaebe67b07da2",
"url": "https://github.com/handlebars-lang/handlebars.js/commit/68d8df5a88e0a26fe9e6084c5c6aaebe67b07da2"
},
{
"category": "external",
"summary": "https://github.com/handlebars-lang/handlebars.js/releases/tag/v4.7.9",
"url": "https://github.com/handlebars-lang/handlebars.js/releases/tag/v4.7.9"
},
{
"category": "external",
"summary": "https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-2w6w-674q-4c4q",
"url": "https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-2w6w-674q-4c4q"
}
],
"release_date": "2026-03-27T21:03:46.748000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T14:43:48+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10175"
},
{
"category": "workaround",
"details": "To mitigate this issue, ensure that any input provided to the `Handlebars.compile()` function is strictly validated to be a string type, preventing the injection of crafted Abstract Syntax Tree (AST) objects. Additionally, for deployments where templates are pre-compiled at build time, consider utilizing the Handlebars runtime-only build (`handlebars/runtime`). This build variant does not include the `compile()` function, thereby eliminating the attack vector. If the application is a service, a restart may be required for the changes to take effect.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "handlebars.js: Handlebars: Remote Code Execution via crafted Abstract Syntax Tree object in compile()"
},
{
"cve": "CVE-2026-33938",
"cwe": {
"id": "CWE-917",
"name": "Improper Neutralization of Special Elements used in an Expression Language Statement (\u0027Expression Language Injection\u0027)"
},
"discovery_date": "2026-03-27T22:02:58.504001+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452525"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Handlebars. A remote attacker can exploit this vulnerability by manipulating the `@partial-block` special variable within the template data context. By overwriting `@partial-block` with a specially crafted Abstract Syntax Tree (AST) through a helper, a subsequent invocation of `{{\u003e @partial-block}}` will compile and execute the malicious AST. This enables arbitrary JavaScript execution on the server, leading to potential compromise of the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "handlebars: Handlebars: Arbitrary code execution via @partial-block overwrite",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in Handlebars allows arbitrary code execution when processing untrusted input. This occurs if an attacker can manipulate the `@partial-block` special variable through a helper, leading to the execution of a crafted Abstract Syntax Tree. Red Hat products are affected if they use Handlebars versions 4.0.0 through 4.7.8 in server-side applications where untrusted input can influence template data or context objects. Deployments utilizing the Handlebars runtime-only build are not vulnerable.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33938"
},
{
"category": "external",
"summary": "RHBZ#2452525",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452525"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33938",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33938"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33938",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33938"
},
{
"category": "external",
"summary": "https://github.com/handlebars-lang/handlebars.js/commit/68d8df5a88e0a26fe9e6084c5c6aaebe67b07da2",
"url": "https://github.com/handlebars-lang/handlebars.js/commit/68d8df5a88e0a26fe9e6084c5c6aaebe67b07da2"
},
{
"category": "external",
"summary": "https://github.com/handlebars-lang/handlebars.js/releases/tag/v4.7.9",
"url": "https://github.com/handlebars-lang/handlebars.js/releases/tag/v4.7.9"
},
{
"category": "external",
"summary": "https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-3mfm-83xf-c92r",
"url": "https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-3mfm-83xf-c92r"
}
],
"release_date": "2026-03-27T21:05:42.485000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T14:43:48+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10175"
},
{
"category": "workaround",
"details": "Applications using Handlebars should implement the runtime-only build (`require(\u0027handlebars/runtime\u0027)`) to prevent exploitation, as this build lacks the vulnerable `compile()` method. Additionally, review all registered helpers to ensure they do not write arbitrary values to context objects, and avoid using third-party helpers in contexts exposed to untrusted input.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "handlebars: Handlebars: Arbitrary code execution via @partial-block overwrite"
},
{
"cve": "CVE-2026-33939",
"cwe": {
"id": "CWE-248",
"name": "Uncaught Exception"
},
"discovery_date": "2026-03-27T22:01:36.296267+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452508"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Handlebars.js. A remote attacker can exploit this by submitting a malformed Handlebars template that includes decorator syntax referencing an unregistered decorator. When the application attempts to compile this template without proper error handling, it triggers an unhandled `TypeError`. This error causes the Node.js process to crash, resulting in a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "handlebars.js: Handlebars.js: Denial of Service via malformed decorator syntax in template compilation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in Handlebars.js affecting applications that compile user-supplied templates without proper error handling. A remote attacker can submit a malformed template containing unregistered decorator syntax, leading to an unhandled `TypeError` and crashing the Node.js process. Red Hat products are vulnerable if they use Handlebars.js in a configuration that allows untrusted input to be compiled at runtime without implementing `try/catch` blocks or input validation.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33939"
},
{
"category": "external",
"summary": "RHBZ#2452508",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452508"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33939",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33939"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33939",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33939"
},
{
"category": "external",
"summary": "https://github.com/handlebars-lang/handlebars.js/commit/68d8df5a88e0a26fe9e6084c5c6aaebe67b07da2",
"url": "https://github.com/handlebars-lang/handlebars.js/commit/68d8df5a88e0a26fe9e6084c5c6aaebe67b07da2"
},
{
"category": "external",
"summary": "https://github.com/handlebars-lang/handlebars.js/releases/tag/v4.7.9",
"url": "https://github.com/handlebars-lang/handlebars.js/releases/tag/v4.7.9"
},
{
"category": "external",
"summary": "https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-9cx6-37pm-9jff",
"url": "https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-9cx6-37pm-9jff"
}
],
"release_date": "2026-03-27T21:08:24.664000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T14:43:48+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10175"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications utilizing Handlebars.js should implement robust error handling during template compilation and rendering. Specifically, wrap template compilation and rendering calls in `try/catch` blocks to gracefully handle `TypeError` exceptions. Alternatively, validate user-supplied template input to reject decorator syntax (`{{*...}}`) if decorators are not actively used by the application. Employing a pre-compilation workflow, where templates are compiled at build time and only pre-compiled templates are served, can also prevent runtime exploitation. If the application is a service, a restart may be required for changes to take effect.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "handlebars.js: Handlebars.js: Denial of Service via malformed decorator syntax in template compilation"
},
{
"cve": "CVE-2026-33940",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-03-27T22:02:42.813017+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452521"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Handlebars.js. A remote attacker can exploit this vulnerability by providing a specially crafted object within the template context. This crafted object, when processed by a dynamic partial lookup, can bypass security checks and be interpreted as malicious code. This allows the attacker to execute arbitrary commands on the server where Handlebars.js is running.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "handlebars.js: Handlebars.js: Arbitrary code execution via crafted template context",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important arbitrary code execution vulnerability in Handlebars.js. The flaw can be exploited when an application uses Handlebars.js with dynamic partial lookups and processes user-controlled data within the template context. Red Hat products bundling Handlebars.js are affected if they meet these specific conditions for exploitation.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33940"
},
{
"category": "external",
"summary": "RHBZ#2452521",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452521"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33940",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33940"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33940",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33940"
},
{
"category": "external",
"summary": "https://github.com/handlebars-lang/handlebars.js/commit/68d8df5a88e0a26fe9e6084c5c6aaebe67b07da2",
"url": "https://github.com/handlebars-lang/handlebars.js/commit/68d8df5a88e0a26fe9e6084c5c6aaebe67b07da2"
},
{
"category": "external",
"summary": "https://github.com/handlebars-lang/handlebars.js/releases/tag/v4.7.9",
"url": "https://github.com/handlebars-lang/handlebars.js/releases/tag/v4.7.9"
},
{
"category": "external",
"summary": "https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-xhpv-hc6g-r9c6",
"url": "https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-xhpv-hc6g-r9c6"
}
],
"release_date": "2026-03-27T21:11:10.719000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T14:43:48+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10175"
},
{
"category": "workaround",
"details": "To mitigate this issue, use the runtime-only build of Handlebars.js, which prevents the fallback compilation path from being reached. Alternatively, sanitize all context data before rendering to ensure no non-primitive objects are passed to dynamic partials. Avoid dynamic partial lookups (`{{\u003e (lookup ...)}}`) when context data is user-controlled. Implementing these mitigations may require application-level changes.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "handlebars.js: Handlebars.js: Arbitrary code execution via crafted template context"
},
{
"cve": "CVE-2026-33941",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-03-27T22:02:54.583022+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452524"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Handlebars. The Handlebars command-line interface (CLI) precompiler concatenates user-controlled strings, such as template file names and CLI options, directly into the generated JavaScript without proper escaping or sanitization. An attacker capable of influencing these inputs can inject arbitrary JavaScript code. This can lead to arbitrary code execution when the generated JavaScript bundle is loaded in a Node.js environment or a web browser.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "handlebars.js: Handlebars: Arbitrary code execution via CLI precompiler input sanitization flaw",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: This flaw in Handlebars allows arbitrary code execution when the CLI precompiler processes untrusted inputs. An attacker who can influence template filenames or command-line arguments can inject malicious JavaScript, which executes when the generated bundle is loaded. Red Hat products utilizing the Handlebars CLI precompiler in environments where untrusted inputs are processed may be affected.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33941"
},
{
"category": "external",
"summary": "RHBZ#2452524",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452524"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33941",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33941"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33941",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33941"
},
{
"category": "external",
"summary": "https://github.com/handlebars-lang/handlebars.js/commit/68d8df5a88e0a26fe9e6084c5c6aaebe67b07da2",
"url": "https://github.com/handlebars-lang/handlebars.js/commit/68d8df5a88e0a26fe9e6084c5c6aaebe67b07da2"
},
{
"category": "external",
"summary": "https://github.com/handlebars-lang/handlebars.js/releases/tag/v4.7.9",
"url": "https://github.com/handlebars-lang/handlebars.js/releases/tag/v4.7.9"
},
{
"category": "external",
"summary": "https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-xjpj-3mr7-gcpf",
"url": "https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-xjpj-3mr7-gcpf"
}
],
"release_date": "2026-03-27T21:13:15.437000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T14:43:48+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10175"
},
{
"category": "workaround",
"details": "To mitigate this issue, ensure all inputs to the Handlebars CLI precompiler are thoroughly validated, rejecting characters with JavaScript string-escaping significance (e.g., \\\" , \\\u0027 , ;). For automated build pipelines, configure a fixed and trusted namespace string via a configuration file rather than passing it through command-line arguments. Additionally, consider running the precompiler within a sandboxed environment, such as a container with restricted write access, to limit the potential impact of successful exploitation.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "handlebars.js: Handlebars: Arbitrary code execution via CLI precompiler input sanitization flaw"
},
{
"cve": "CVE-2026-34986",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"discovery_date": "2026-04-06T17:01:34.639203+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455470"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "RHBZ#2455470",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455470"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34986",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34986"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8",
"url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants",
"url": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants"
}
],
"release_date": "2026-04-06T16:22:45.353000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T14:43:48+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10175"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object"
},
{
"cve": "CVE-2026-40175",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-04-10T20:02:10.296601+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2457432"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability, known as Prototype Pollution, can be exploited through a specific \"Gadget\" attack chain. This allows an attacker to escalate a Prototype Pollution vulnerability in a third-party dependency, potentially leading to remote code execution or a full cloud compromise, such as bypassing AWS IMDSv2.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Remote Code Execution via Prototype Pollution escalation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The Axios library, a promise-based HTTP client, is susceptible to an Important prototype pollution vulnerability. This flaw, when combined with specific \"Gadget\" attack chains in third-party dependencies, can lead to remote code execution or full cloud compromise, including bypassing AWS IMDSv2.\n \nWith pollution check patch available in Axios gives an advantage, it remains vulnerable due to HTTP Header Sanitation and Server-Side Request Forgery threat.\n\nRed Hat products that incorporate the vulnerable Axios library are affected.\n\nThe openshift4/ose-monitoring-plugin-rhel9 container image is not vulnerable to this flaw. The affected component is used as a build-time dependency but it\u0027s not shipped in the final product, meaning the flaw is not present thus cannot be exploited in the container deployments.\n\nRegarding openshift4/ose-console for Product stream 4.12 and 4.13, the vulnerable component is present (indirect dependency), but the vulnerability is not exploitable in our case due to the browser runtime, where the required Node.js-specific attack vectors are not available. With this, the impact becomes low.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-40175"
},
{
"category": "external",
"summary": "RHBZ#2457432",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457432"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-40175",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-40175"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-40175",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40175"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/commit/363185461b90b1b78845dc8a99a1f103d9b122a1",
"url": "https://github.com/axios/axios/commit/363185461b90b1b78845dc8a99a1f103d9b122a1"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/pull/10660",
"url": "https://github.com/axios/axios/pull/10660"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/releases/tag/v1.15.0",
"url": "https://github.com/axios/axios/releases/tag/v1.15.0"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-fvcv-3m26-pcqx",
"url": "https://github.com/axios/axios/security/advisories/GHSA-fvcv-3m26-pcqx"
}
],
"release_date": "2026-04-10T19:23:52.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T14:43:48+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10175"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.0,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Remote Code Execution via Prototype Pollution escalation"
}
]
}
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.